nerdexam
AmazonAmazon

DBS-C01 · Question #4

DBS-C01 Question #4: Real Exam Question with Answer & Explanation

Sign in or unlock DBS-C01 to reveal the answer and full explanation for question #4. The question stem and answer options stay visible for context.

Submitted by haru.x· Mar 6, 2026Database Security

Question

A media company is using Amazon RDS for PostgreSQL to store user data. The RDS DB instance currently has a publicly accessible setting enabled and is hosted in a public subnet. Following a recent AWS Well-Architected Framework review, a Database Specialist was given new security requirements. - Only certain on-premises corporate network IPs should connect to the DB instance. - Connectivity is allowed from the corporate network only. Which combination of steps does the Database Specialist need to take to meet these new requirements? (Choose three.)

Options

  • AModify the pg_hba.conf file. Add the required corporate network IPs and remove the unwanted
  • BModify the associated security group. Add the required corporate network IPs and remove the
  • CMove the DB instance to a private subnet using AWS DMS.
  • DEnable VPC peering between the application host running on the corporate network and the VPC
  • EDisable the publicly accessible setting.
  • FConnect to the DB instance using private IPs and a VPN.

Unlock DBS-C01 to see the answer

You've previewed enough free DBS-C01 questions. Unlock DBS-C01 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Database Security#Network Access Control#RDS Configuration#Hybrid Cloud Connectivity
Full DBS-C01 PracticeBrowse All DBS-C01 Questions