DBS-C01 · Question #30
A company is developing a multi-tier web application hosted on AWS using Amazon Aurora as the database. The application needs to be deployed to production and other non-production environments. A Data
Sign in or unlock DBS-C01 to reveal the answer and full explanation for question #30. The question stem and answer options stay visible for context.
Question
A company is developing a multi-tier web application hosted on AWS using Amazon Aurora as the database. The application needs to be deployed to production and other non-production environments. A Database Specialist needs to specify different MasterUsername and MasterUserPassword properties in the AWS CloudFormation templates used for automated deployment. The CloudFormation templates are version controlled in the company's code repository. The company also needs to meet compliance requirement by routinely rotating its database master password for production. What is most secure solution to store the master password?
Options
- AStore the master password in a parameter file in each environment. Reference the environment-
- BEncrypt the master password using an AWS KMS key. Store the encrypted master password in
- CUse the secretsmanager dynamic reference to retrieve the master password stored in AWS
- DUse the ssm dynamic reference to retrieve the master password stored in the AWS Systems
Unlock DBS-C01 to see the answer
You've previewed enough free DBS-C01 questions. Unlock DBS-C01 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.