DBS-C01 Database Security Practice Question
A company is using Amazon RDS for MySQL and wants to restrict access to the database based on the source IP address. Which AWS feature should be used to achieve this?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
VPC Security Groups
Security groups act as a virtual firewall for RDS instances. You can specify inbound rules that allow traffic only from certain IP addresses or other security groups. Network ACLs are for subnets, not individual instances. IAM policies control API access, not network traffic. DB parameter groups configure database engine parameters.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
DB Parameter Groups
Why it's wrong here
Parameter groups do not control network access.
- ✓
VPC Security Groups
Why this is correct
Security groups act as a firewall for the DB instance, controlling inbound traffic based on IP or other security groups.
- ✗
IAM Database Authentication
Why it's wrong here
IAM authentication controls user access, not network-level IP restrictions.
- ✗
Network ACLs
Why it's wrong here
NACLs are stateless and apply at the subnet level.
Visual reference
Go deeper
Related to this question
About these practice questions
This DBS-C01 question is part of Courseiva's 1,663-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DBS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DBS-C01 exam.