1Z0-908: MySQL 8.0 Database AdministratorDemo

By Oracle · Question Mode

QuestionQ82

Database Security

All MySQL Server instances that belong to the InnoDB Cluster have SSL configured and enabled.

You must configure the InnoDB Cluster to use SSL for group communication.

Which two statements are true?

Choose two
  • A SSL group communication must be enabled at cluster creation time by specifying createCluster ({memberSslMode: 'REQUIRED'}).
  • B Configuring SSL group communication also configures SSL distributed recovery.
  • C An existing InnoDB Cluster must be dissolved and created from scratch to enable SSL for group communication.
  • D SSL group communication can be enabled for an existing cluster, one instance at time, by setting group_replication_ssl_mode.
  • E If only some InnoDB Cluster members are enabled for SSL group communication, and --ssl-mode=PREFERRED, communication will fall back to unencrypted connection.
  • F SSL group communication requires the use of an additional set of parameters group_replication_recovery_*.
Explanation

InnoDB Cluster sets its memberSslMode when dba.createCluster() creates the cluster; REQUIRED enables SSL and raises an error if it cannot be enabled. The cluster SSL mode can only be set at creation time, so an existing cluster must be dissolved and re-created to change that mode. SSL for Group Replication distributed recovery is configured separately from SSL for normal group communication.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!