Amazon
SOA-C02 · Question #386
A company is hosting applications on Amazon EC2 instances. The company is hosting a database on an Amazon RDS for PostgreSQL DB instance. The company requires all connections to the DB instance to…
The correct answer is C. Enforce SSL connections to the database by using a custom parameter group. https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithParamGroups.
Submitted by eva_at· Mar 30, 2026Security and Compliance
Question
A company is hosting applications on Amazon EC2 instances. The company is hosting a database on an Amazon RDS for PostgreSQL DB instance. The company requires all connections to the DB instance to be encrypted. What should a SysOps administrator do to meet this requirement?
Options
- AAllow SSL connections to the database by using an inbound security group rule.
- BEncrypt the database by using an AWS Key Management Service (AWS KMS) encryption key.
- CEnforce SSL connections to the database by using a custom parameter group.
- DPatch the database with SSL/TLS by using a custom PostgreSQL extension.
How the community answered
(47 responses)- A4% (2)
- B6% (3)
- C74% (35)
- D15% (7)
Explanation
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithParamGroups.
Topics
#RDS SSL enforcement#parameter group#encryption in transit#PostgreSQL security
Community Discussion
No community discussion yet for this question.