Which combination of steps should a database specialist take to meet this requirement?
(Choose two.)
Create a service-linked role for Amazon RDS that grants permissions for Amazon RDS to store audit logs on Amazon S3.
Set up a parameter group to configure an IAM role and an Amazon S3 bucket for audit log storage. Associate the parameter group with the DB instance.
Disable Multi-AZ on the DB instance, and then enable auditing. Enable Multi-AZ after auditing is enabled.
Disable automated backup on the DB instance, and then enable auditing. Enable automated backup after auditing is enabled.
Set up an options group to configure an IAM role and an Amazon S3 bucket for audit log storage. Associate the options group with the DB instance.
Explanations:
A service-linked role for Amazon RDS is required to store audit logs on Amazon S3. This grants the necessary permissions for RDS to upload logs to an S3 bucket.
While a parameter group is used to configure certain DB settings, it does not configure IAM roles or S3 buckets for audit log storage. This configuration is done through an options group, not a parameter group.
Disabling Multi-AZ is not required to enable SQL Server auditing on RDS. SQL Server auditing can be enabled regardless of whether Multi-AZ is active.
Disabling automated backups is not required to enable SQL Server auditing. Auditing can be enabled without affecting the automated backup setting.
An options group is used to configure the necessary IAM role and S3 bucket for storing audit logs. The options group must then be associated with the DB instance to enable auditing.
I plot that the answer is:
Create a service-linked role for Amazon RDS that grants permissions for Amazon RDS to store audit logs on Amazon S3.