To satisfy a security requirement, you have created or altered some user accounts to include REQUIRE X509. Which additional task needs to be performed for those user accounts to fulfill the…

Question

Options

• AInstall the X509 plug-in on the server.
• BSet the X509 option in the [client] section of the MySQL server's configuration file.
• CRestart the server with the --require-x509 option.
• DDistribute client digital certificates to the client computers being used to log in by the user accounts.
• EProvide users access to the server's private key.

• A
  16% (3)
• B
  74% (14)
• C
  5% (1)
• D
  5% (1)

Explanation

Setting the X509 option in the [client] section of the MySQL configuration file (my.cnf/my.ini) is the required additional step because it instructs MySQL client programs to negotiate an SSL/TLS connection using X509 certificate authentication - without this client-side configuration, clients will not present certificates even if the server requires them for those accounts.

Why the distractors are wrong:

• A - X509 is not a plugin; SSL/TLS support is built into MySQL and requires no separate plugin installation.
• C - --require-x509 is not a valid MySQL server startup option; X509 requirements are enforced at the account level via REQUIRE X509.
• D - While certificates must physically exist on client machines, distributing them alone does nothing without also configuring the client to use them; the [client] configuration is what activates that behavior.
• E - Clients must never receive the server's private key; they authenticate using their own client certificates, not the server's key material.

Memory tip: Remember that the [client] section in MySQL's config file governs how client programs connect - think of it as "client-side handshake settings." When the server demands X509, the client config must be told to offer it.

No community discussion yet for this question.