nerdexam
Amazon

DBS-C01 · Question #241

An ecommerce company is running AWS Database Migration Service (AWS DMS) to replicate an on-premises Microsoft SQL Server database to Amazon RDS for SQL Server. The company has set up an AWS Direct…

The correct answer is D. Create a new replication VPC subnet group with private subnets. Modify the DMS replication. To disable public access to your replication instance, delete the replication instance and then recreate it. Before you can delete a replication instance, you must delete all the tasks that use the replication instance. Instead of recreating the replication instance, you can…

Submitted by anna_se· Mar 6, 2026Database Security

Question

An ecommerce company is running AWS Database Migration Service (AWS DMS) to replicate an on-premises Microsoft SQL Server database to Amazon RDS for SQL Server. The company has set up an AWS Direct Connect connection from its on-premises data center to AWS. During the migration, the company’s security team receives an alarm that is related to the migration. The security team mandates that the DMS replication instance must not be accessible from public IP addresses. What should a database specialist do to meet this requirement?

Options

  • ASet up a VPN connection to encrypt the traffic over the Direct Connect connection.
  • BModify the DMS replication instance by disabling the publicly accessible option.
  • CDelete the DMS replication instance. Recreate the DMS replication instance with the publicly
  • DCreate a new replication VPC subnet group with private subnets. Modify the DMS replication

How the community answered

(49 responses)
  • A
    6% (3)
  • B
    12% (6)
  • C
    2% (1)
  • D
    80% (39)

Explanation

To disable public access to your replication instance, delete the replication instance and then recreate it. Before you can delete a replication instance, you must delete all the tasks that use the replication instance. Instead of recreating the replication instance, you can change the subnets that are in the subnet group that is associated with the replication instance to private subnets. https://aws.amazon.com/premiumsupport/knowledge-center/dms-disable-public-access/

Topics

#AWS DMS#replication instance#private subnets#VPC subnet group

Community Discussion

No community discussion yet for this question.

Full DBS-C01 Practice