nerdexam
Amazon

DBS-C01 · Question #238

A security team is conducting an audit for a financial company. The security team discovers that the database credentials of an Amazon RDS for MySQL DB instance are hardcoded in the source code. The…

The correct answer is C. Store the credentials in an AWS Systems Manager Parameter Store secure string parameter that. Only credentials in system manager secure parameter.

Submitted by jaden.t· Mar 6, 2026Database Security

Question

A security team is conducting an audit for a financial company. The security team discovers that the database credentials of an Amazon RDS for MySQL DB instance are hardcoded in the source code. The source code is stored in a shared location for automatic deployment and is exposed to all users who can access the location. A database specialist must use encryption to ensure that the credentials are not visible in the source code. Which solution will meet these requirements?

Options

  • AUse an AWS Key Management Service (AWS KMS) key to encrypt the most recent database
  • BStore the source code to access the credentials in an AWS Systems Manager Parameter Store
  • CStore the credentials in an AWS Systems Manager Parameter Store secure string parameter that
  • DUse an AWS Key Management Service (AWS KMS) key to encrypt the DB instance at rest.

How the community answered

(18 responses)
  • A
    6% (1)
  • C
    94% (17)

Explanation

Only credentials in system manager secure parameter.

Topics

#database credentials#secret management#Parameter Store#secure string

Community Discussion

No community discussion yet for this question.

Full DBS-C01 Practice