Question 44 of 1,663
DBS-C01 Database Security Practice Question
Network Topology
A security engineer runs the commands shown in the exhibit for an RDS MySQL DB instance. The engineer wants to enforce SSL connections to the database. What should the engineer do?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a custom DB parameter group with require_secure_transport set to ON, associate it with the DB instance, and reboot the instance.
Enforcing SSL for MySQL requires setting require_secure_transport to ON in a custom DB parameter group, then associating it with the DB instance and rebooting. Option A is wrong because the default parameter group cannot be modified. Option B is wrong because there is no --require-ssl-transport flag; the setting is a parameter group parameter, not an instance-level flag. Option D is wrong because IAM database authentication does not enforce SSL connections.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Modify the default.mysql8.0 parameter group to set require_secure_transport to ON and reboot the instance.
Why it's wrong here
Default parameter groups cannot be modified.
- ✗
Run the modify-db-instance command with --require-ssl-transport.
Why it's wrong here
There is no such parameter in the RDS API.
- ✓
Create a custom DB parameter group with require_secure_transport set to ON, associate it with the DB instance, and reboot the instance.
Why this is correct
This is the correct method to enforce SSL.
- ✗
Modify the DB instance and set the --enable-iam-database-authentication flag.
Why it's wrong here
IAM authentication requires SSL but does not enforce it directly.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Last reviewed: Jun 20, 2026
This DBS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DBS-C01 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.