DBS-C01 · Question #214
A company conducted a security audit of its AWS infrastructure. The audit identified that data was not encrypted in transit between application servers and a MySQL database that is hosted in Amazon…
The correct answer is A. Update the parameter group in use by the DB instance, and set the require_secure_transport. You can set the require_secure_transport parameter to ON to require SSL/TLS for connections to your DB cluster. https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Security
Question
A company conducted a security audit of its AWS infrastructure. The audit identified that data was not encrypted in transit between application servers and a MySQL database that is hosted in Amazon RDS. After the audit, the company updated the application to use an encrypted connection. To prevent this problem from occurring again, the company’s database team needs to configure the database to require in-transit encryption for all connections. Which solution will meet this requirement?
Exhibit
Options
- AUpdate the parameter group in use by the DB instance, and set the require_secure_transport
- BConnect to the database, and use ALTER USER to enable the REQUIRE SSL option on the
- CUpdate the security group in use by the DB instance, and remove port 80 to prevent unencrypted
- DUpdate the DB instance, and enable the Require Transport Layer Security option.
How the community answered
(28 responses)- A75% (21)
- B7% (2)
- C4% (1)
- D14% (4)
Explanation
You can set the require_secure_transport parameter to ON to require SSL/TLS for connections to your DB cluster. https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Security
Topics
Community Discussion
No community discussion yet for this question.