ExpertMedium1 markMultiple Choice
AWS SAA-C03 · Question 05 · Domain 1.3: Data Security
A company needs to store database credentials securely. The credentials must be automatically rotated every 30 days. Which AWS service should be used?
A company needs to store database credentials securely. The credentials must be automatically rotated every 30 days. Which AWS service should be used?
Answer options:
A.
AWS Systems Manager Parameter Store
B.
AWS KMS
C.
AWS Secrets Manager
D.
AWS Certificate Manager
How to approach this question
Identify the service that supports automatic secret rotation.
Full Answer
C.AWS Secrets Manager✓ Correct
AWS Secrets Manager
AWS Secrets Manager is specifically designed to manage, retrieve, and automatically rotate database credentials and API keys.
Common mistakes
Choosing Parameter Store, which requires custom Lambda functions for rotation.
Practice the full AWS SAA-C03 Practice Exam 2
65 questions · hints · full answers · grading
More questions from this exam
Q01A company wants to ensure that no AWS resources can be created in the ap-northeast-1 region acros...EasyQ02A web application runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The com...EasyQ03A company is storing highly sensitive data in an Amazon S3 bucket. The security team requires tha...MediumQ04An application running on an EC2 instance needs to access an Amazon DynamoDB table in a different...HardQ06A solutions architect needs to implement a threat detection service that continuously monitors fo...Easy