Exam AWS Certified Database - Specialty topic 1 question 286 discussion

Exam question from Amazon's AWS Certified Database - Specialty

Question #: 286
Topic #: 1

[All AWS Certified Database - Specialty Questions]

A company uses an Amazon Aurora MySQL DB cluster with the most recent version of the MySQL database engine. The company wants all data that is transferred between clients and the DB cluster to be encrypted.

What should a database specialist do to meet this requirement?

A. Turn on data encryption when modifying the DB cluster by using the AWS Management Console or by using the AWS CLI to call the modify-db-cluster command.
B. Download the key pair for the DB instance. Reference that file from the --key-name option when connecting with a MySQL client.
C. Turn on data encryption by using AWS Key Management Service (AWS KMS). Use the AWS KMS key to encrypt the connections between a MySQL client and the Aurora DB cluster.
D. Turn on the require_secure_transport parameter in the DB cluster parameter group. Download the root certificate for the DB instance. Reference that file from the --ssl-ca option when connecting with a MySQL client.

Show Suggested Answer

Suggested Answer: D 🗳️

by rdiaz at March 26, 2023, 3:42 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.