DBS-C01 · Question #338
A company is using an Amazon Aurora PostgreSQL database for a project with a government agency. All database communications must be encrypted in transit. All non-SSL/TLS connection requests must be…
The correct answer is B. Set the rds.force_ssl parameter in the DB cluster parameter group to 1. You can require that connections to your PostgreSQL DB instance use SSL by using the rds.force_ssl parameter. The default rds.force_ssl parameter is set to 1 (on) for RDS for PostgreSQL version 15. All other RDS for PostgreSQL major version 14 and older have the default value…
Question
A company is using an Amazon Aurora PostgreSQL database for a project with a government agency. All database communications must be encrypted in transit. All non-SSL/TLS connection requests must be rejected. What should a database specialist do to meet these requirements?
Options
- ASet the rds.force_ssl parameter in the DB cluster parameter group to default.
- BSet the rds.force_ssl parameter in the DB cluster parameter group to 1.
- CSet the rds.force_ssl parameter in the DB cluster parameter group to 0.
- DSet the SQLNET.SSL_VERSION option in the DB cluster option group to 1.2.
How the community answered
(60 responses)- A5% (3)
- B87% (52)
- C7% (4)
- D2% (1)
Explanation
You can require that connections to your PostgreSQL DB instance use SSL by using the rds.force_ssl parameter. The default rds.force_ssl parameter is set to 1 (on) for RDS for PostgreSQL version 15. All other RDS for PostgreSQL major version 14 and older have the default value for rds.force_ssl parameter set to 0 (off). You can set the rds.force_ssl parameter to 1 (on) to require SSL for connections to your DB instance. https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/PostgreSQL.Concepts.General.SSL
Topics
Community Discussion
No community discussion yet for this question.