nerdexam
AmazonAmazon

DBS-C01 · Question #2

DBS-C01 Question #2: Real Exam Question with Answer & Explanation

Sign in or unlock DBS-C01 to reveal the answer and full explanation for question #2. The question stem and answer options stay visible for context.

Submitted by fernanda_arg· Mar 6, 2026Database Security

Question

The Security team for a finance company was notified of an internal security breach that happened 3 weeks ago. A Database Specialist must start producing audit logs out of the production Amazon Aurora PostgreSQL cluster for the Security team to use for monitoring and alerting. The Security team is required to perform real-time alerting and monitoring outside the Aurora DB cluster and wants to have the cluster push encrypted files to the chosen solution. Which approach will meet these requirements?

Options

  • AUse pg_audit to generate audit logs and send the logs to the Security team.
  • BUse AWS CloudTrail to audit the DB cluster and the Security team will get data from Amazon S3.
  • CSet up database activity streams and connect the data stream from Amazon Kinesis to consumer
  • DTurn on verbose logging and set up a schedule for the logs to be dumped out for the Security

Unlock DBS-C01 to see the answer

You've previewed enough free DBS-C01 questions. Unlock DBS-C01 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Aurora PostgreSQL#Database Activity Streams#Real-time Monitoring#Database Auditing
Full DBS-C01 PracticeBrowse All DBS-C01 Questions