SAP-C02 Q214 · Database

Question

A company needs to migrate its customer transactions database from on premises to AWS. The database resides on an Oracle DB instance that runs on a Linux server. According to a new security requirement, the company must rotate the database password each year. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

**Option B: Migrate to Amazon RDS for Oracle + AWS Secrets Manager with automatic rotation**

**Requirement 1: Migrate Oracle DB to AWS**
- Amazon RDS for Oracle is a fully managed service that natively supports Oracle databases. This is a **homogeneous migration** (Oracle → Oracle), which is the simplest migration path — no schema conversion needed, no application code changes for query syntax, and AWS Database Migration Service (DMS) can handle the data transfer.

**Requirement 2: Yearly password rotation**
- AWS Secrets Manager has **built-in native integration with Amazon RDS**. When you store an RDS database credential in Secrets Manager, you can enable automatic rotation with just a few clicks. Secrets Manager automatically creates the Lambda rotation function for RDS-supported datab

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips