ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 96 - DBS-C01 discussion

Report
Export

A company is going through a security audit. The audit team has identified cleartext master user password in the AWS CloudFormation templates for Amazon RDS for MySQL DB instances. The audit team has flagged this as a security risk to the database team.

What should a database specialist do to mitigate this risk?

A.
Change all the databases to use AWS IAM for authentication and remove all the cleartext passwords in CloudFormation templates.
Answers
A.
Change all the databases to use AWS IAM for authentication and remove all the cleartext passwords in CloudFormation templates.
B.
Use an AWS Secrets Manager resource to generate a random password and reference the secret in the CloudFormation template.
Answers
B.
Use an AWS Secrets Manager resource to generate a random password and reference the secret in the CloudFormation template.
C.
Remove the passwords from the CloudFormation templates so Amazon RDS prompts for the password when the database is being created.
Answers
C.
Remove the passwords from the CloudFormation templates so Amazon RDS prompts for the password when the database is being created.
D.
Remove the passwords from the CloudFormation template and store them in a separate file. Replace the passwords by running CloudFormation using a sed command.
Answers
D.
Remove the passwords from the CloudFormation template and store them in a separate file. Replace the passwords by running CloudFormation using a sed command.
Suggested answer: B

Explanation:


https://aws.amazon.com/blogs/infrastructure-and-automation/securing-passwords-in-aws-quickstarts-using-aws-secrets-manager/

asked 16/09/2024
TIAM HERVE
47 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first