A Company Is Going Through a Security Audit

question 77

Multiple Choice

A company is going through a security audit. The audit team has identified cleartext master user password in the AWS CloudFormation templates for Amazon RDS for MySQL DB instances. The audit team has flagged this as a security risk to the database team. What should a database specialist do to mitigate this risk?

• A) Change all the databases to use AWS IAM for authentication and remove all the cleartext passwords in CloudFormation templates.
• B) Use an AWS Secrets Manager resource to generate a random password and reference the secret in the CloudFormation template.
• C) Remove the passwords from the CloudFormation templates so Amazon RDS prompts for the password when the database is being created.
• D) Remove the passwords from the CloudFormation template and store them in a separate file. Replace the passwords by running CloudFormation using a sed command.

---

Definitions:

Debt-equity Ratio

A ratio illustrating the division of asset financing between shareholder equity and company debt.

Dividend Payout Ratio

The fraction of net income a firm pays to its shareholders in dividends, typically expressed as a percentage.

Dividend Payout Ratio

A metric that shows what portion of a company's earnings are distributed to shareholders in the form of dividends, typically expressed as a percentage.