Your company is planning to host a set of databases using the AWS RDS service. The IT security department has mandated that all traffic is encrypted in transit. How can you achieve this with a database instance created with the AWS RDS service? Choose 2 answers from the options given below.

Answer options:

A.Use the SSL certificates provided by the AWS RDS service.
B.Set the Parameter Group for the RDS Instance.
C.Use the .pem keys files that come for the underlying server.
D.Use the KMS service to encrypt the traffic.

Correct Answers: A and B
This is given in the AWS Documentation. An example of the Microsoft SQL server is given below.
Option C is incorrect since you don’t have access to the underlying server.
Option D is incorrect since the KMS service can’t be used to encrypt the traffic.
For more information on this example, please refer to the below URL-
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/SQLServer.Concepts.General.SSL.Using.html