Alibaba ACA-Developer Exam - Topic 5 Question 15 Discussion

Question

When connecting to the Alibaba Cloud RDS database, in order to improve the completeness and integrity of the connection, you can enable SSL encryption and install an SSL CA certificate for the required application service. Which of the following statements are correct? (Number of correct answers: 3)

Lenna · Accepted Answer

A) Due to the way in which SSL encryption is implemented, enabling SSL encryption will significantly increase the CPU usage rate. Enable SSL encryption when there is an encryption requirement for the external network link. The intranet link is relatively safe, and generally no link encryption is required. and B) If the RDS instance is a multi-node instance, the system will trigger the active/standby switch after the SSL service is disabled. and C) When using read/write splitting, you can also enable SSL encryption to improve the security of the connection.

Lenna · Answer

D) It is discovered that an Alibaba Cloud RDS SSL certificate is about to expire, and the validity period needs to be updated, requiring that the certificate be updated, then reinstalled. This will restart the RDS instance.