DBS-C01 · Question #168
A company is setting up a new Amazon RDS for SQL Server DB instance. The company wants to enable SQL Server auditing on the database. Which combination of steps should a database specialist take to…
The correct answer is A. Create a service-linked role for Amazon RDS that grants permissions for Amazon RDS to store E. Set up an options group to configure an IAM role and an Amazon S3 bucket for audit log storage. To do this, you create an IAM role and delegate permissions so that the Amazon RDS service can use your Amazon S3 bucket. RDS uploads the completed audit logs to your S3 bucket, using the IAM role that you provide. If you enable retention, RDS keeps your audit logs on your DB…
Question
A company is setting up a new Amazon RDS for SQL Server DB instance. The company wants to enable SQL Server auditing on the database. Which combination of steps should a database specialist take to meet this requirement? (Choose two.)
Options
- ACreate a service-linked role for Amazon RDS that grants permissions for Amazon RDS to store
- BSet up a parameter group to configure an IAM role and an Amazon S3 bucket for audit log
- CDisable Multi-AZ on the DB instance, and then enable auditing. Enable Multi-AZ after auditing is
- DDisable automated backup on the DB instance, and then enable auditing. Enable automated
- ESet up an options group to configure an IAM role and an Amazon S3 bucket for audit log storage.
How the community answered
(27 responses)- A81% (22)
- B4% (1)
- C11% (3)
- D4% (1)
Explanation
To do this, you create an IAM role and delegate permissions so that the Amazon RDS service can use your Amazon S3 bucket. RDS uploads the completed audit logs to your S3 bucket, using the IAM role that you provide. If you enable retention, RDS keeps your audit logs on your DB instance for the configured period of https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.SQLServer.Options.Audit.
Topics
Community Discussion
No community discussion yet for this question.