Exam AWS Certified Database - Specialty topic 1 question 16 discussion

Exam question from Amazon's AWS Certified Database - Specialty

Question #: 16
Topic #: 1

[All AWS Certified Database - Specialty Questions]

A company is running a finance application on an Amazon RDS for MySQL DB instance. The application is governed by multiple financial regulatory agencies.
The RDS DB instance is set up with security groups to allow access to certain Amazon EC2 servers only. AWS KMS is used for encryption at rest.
Which step will provide additional security?

A. Set up NACLs that allow the entire EC2 subnet to access the DB instance
B. Disable the master user account
C. Set up a security group that blocks SSH to the DB instance
D. Set up RDS to use SSL for data in transit

Show Suggested Answer

Suggested Answer: D 🗳️

by jove at Nov. 24, 2021, 9:09 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

jove

Highly Voted 3 years, 6 months ago

Selected Answer: D

This needs to be corrected in the question: Instead of "AWS KMS is used to encrypt data in transit" it should be "AWS KMS is used to encrypt data at rest".

upvoted 18 times

...

Pranava_GCP

Most Recent 1 year, 8 months ago

Selected Answer: D

D. Set up RDS to use SSL for data in transit https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html "SSL/TLS connections provide a layer of security by encrypting data that moves between your client and DB instance. Optionally, your SSL/TLS connection can perform server identity verification by validating the server certificate installed on your DB instance."

upvoted 2 times

...

3 years, 6 months ago

D set up ssl

upvoted 3 times

...