nerdexam
Amazon

DBS-C01 · Question #206

A company is loading sensitive data into an Amazon Aurora MySQL database. To meet compliance requirements, the company needs to enable audit logging on the Aurora MySQL DB cluster to audit database…

The correct answer is B. Create a custom DB cluster parameter group. Modify the parameters for Advanced Auditing. https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Auditing.html

Submitted by olafpl· Mar 6, 2026Database Security

Question

A company is loading sensitive data into an Amazon Aurora MySQL database. To meet compliance requirements, the company needs to enable audit logging on the Aurora MySQL DB cluster to audit database activity. This logging will include events such as connections, disconnections, queries, and tables queried. The company also needs to publish the DB logs to Amazon CloudWatch to perform real-time data analysis. Which solution meets these requirements?

Options

  • AModify the default option group parameters to enable Advanced Auditing. Restart the database
  • BCreate a custom DB cluster parameter group. Modify the parameters for Advanced Auditing.
  • CTake a snapshot of the database. Create a new DB instance, and enable custom auditing and
  • DEnable AWS CloudTrail for the DB instance. Create a filter that provides only connections,

How the community answered

(48 responses)
  • A
    8% (4)
  • B
    75% (36)
  • C
    4% (2)
  • D
    13% (6)

Explanation

https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Auditing.html

Topics

#Aurora MySQL#Database auditing#CloudWatch Logs#Parameter groups

Community Discussion

No community discussion yet for this question.

Full DBS-C01 Practice