AWS Certified SysOps Administrator Practice Exam

How can you ensure all connections to an RDS database are encrypted?

1. Enforce encryption at the network level

2. Modify the DB parameter groups

3. Change the database engine settings

4. Implement an AWS VPN connection

The correct answer is: Modify the DB parameter groups

To ensure all connections to an RDS database are encrypted, modifying the DB parameter groups is crucial. In Amazon RDS, you can enable SSL connections by adjusting specific parameters in the DB parameter group associated with your RDS instance. By setting these parameters to require SSL for connections, you ensure that all data transmitted between the database and clients is encrypted, maintaining confidentiality and security. Enforcing encryption at the network level might enhance security, but it does not guarantee that the database itself is configured to require encrypted connections. Changing database engine settings could be applicable in some contexts, but it doesn't directly relate to the requirements of enforcing encryption through the DB parameter groups. Implementing an AWS VPN connection provides a secure communication channel but does not inherently enforce that the database connections are encrypted; this method focuses more on securing the network path rather than the connection itself.