AWS Certified SysOps Administrator – Associate (legacy) — Question 158

A user has setup an RDS DB with Oracle. The user wants to get notifications when someone modifies the security group of that DB. How can the user configure that?

Answer options

• A. It is not possible to get the notifications on a change in the security group
• B. Configure SNS to monitor security group changes
• C. Configure event notification on the DB security group
• D. Configure the CloudWatch alarm on the DB for a change in the security group

Correct answer: C

Explanation

The correct answer is C, as configuring event notifications specifically allows the user to receive alerts for changes to the DB security group. Option A is incorrect because it is indeed possible to receive notifications. Option B is not the best choice since SNS alone does not directly monitor security group changes. Option D is also incorrect because CloudWatch alarms do not specifically trigger on security group changes in this context.