Q74 — AWS SAA-C03 Ch.12

Question 74 of 100 | ← Chapter 12

Q874. A company wants to build a map of its IT infrastructure to identify and enforce policies on resources that pose security risks. The company's security team must be able to query data in the IT infrastructure map and quickly identify security risks.Which solution will meet these requirements with the LEAST operational overhead?

Correct Answer: B. Use Amazon Neptune to store the data. Use SPARQL to query the data to identify security risks.

Explanation

To build a map of the IT infrastructure, enforce policies, and quickly identify security risks with the least operational overhead, the recommended solution is:B. Use Amazon Neptune to store the data and use SPARQL to query the data to identify security risks.Here's why:Option A suggests using Amazon RDS to store the data and SQL to query the data. While Amazon RDS is a managed relational database service, it may not be the most suitable choice for storing and querying graph-like data that represents the IT infrastructure map. Using SQL to query a relational database may require complex joins and may not provide the desired flexibility and efficiency for navigating and analyzing the infrastructure graph.Option C suggests using Amazon Redshift to store the data and SQL to query the data. Amazon Redshift is a powerful data warehousing solution, but it is optimized for analytical workloads and may not be the best fit for storing and querying an IT infrastructure graph. Similar to Option A, using SQL to query a relational database may not provide the most efficient and flexible approach for analyzing graph-like data.Option D suggests using Amazon DynamoDB to store the data and PartiQL to query the data. While Amazon DynamoDB is a highly scalable and flexible NoSQL database service, PartiQL is a SQL-compatible query language, and it may not be the most suitable choice for querying graph-like data and identifying security risks in the IT infrastructure map. PartiQL is primarily designed for querying structured, document-like data.Option B recommends using Amazon Neptune, which is a fully managed graph database service. Neptune is purpose-built for storing and querying graph data, making it a natural fit for building an IT infrastructure map. It supports the SPARQL query language, which is specifically designed for querying graph data and navigating complex relationships. Using SPARQL, the security team can efficiently query the infrastructure map and identify security risks with graph-oriented queries.In summary, the most suitable solution with the least operational overhead for building an IT infrastructure map, enforcing policies, and quickly identifying security risks is to use Amazon Neptune (Option B) to store the data and use SPARQL to query the data. This combination provides a specialized graph database and query language, optimized for working with graph-like data structures.