A Financial Company Wants to Store Sensitive User Data in an Amazon

question 51

Multiple Choice

A financial company wants to store sensitive user data in an Amazon Aurora PostgreSQL DB cluster. The database will be accessed by multiple applications across the company. The company has mandated that all communications to the database be encrypted and the server identity must be validated. Any non-SSL-based connections should be disallowed access to the database. Which solution addresses these requirements?

• A) Set the rds.force_ssl=0 parameter in DB parameter groups. Download and use the Amazon RDS certificate bundle and configure the PostgreSQL connection string with sslmode=allow.
• B) Set the rds.force_ssl=1 parameter in DB parameter groups. Download and use the Amazon RDS certificate bundle and configure the PostgreSQL connection string with sslmode=disable.
• C) Set the rds.force_ssl=0 parameter in DB parameter groups. Download and use the Amazon RDS certificate bundle and configure the PostgreSQL connection string with sslmode=verify-ca.
• D) Set the rds.force_ssl=1 parameter in DB parameter groups. Download and use the Amazon RDS certificate bundle and configure the PostgreSQL connection string with sslmode=verify-full.

---

Definitions:

Third Party

In contract law, a person who may, in some way, be affected by a contract but who is not one of the contracting parties. Also called outside party.

Due Diligence

Due diligence is the investigation or exercise of care that a reasonable business or person is normally expected to take before entering into an agreement or transaction with another party.

Registration Statement

A statement required by the Securities and Exchange Commission to indicate details about a business selling securities.

Cost of Repair Rule

A legal principle that allows a party suffering from property damage to recover the expenses necessary to restore the property to its pre-damage condition.