True or False: When you add a rule to a DB security group, you do not need to specify port number or protocol.
A.
Depends on the RDMS used
B.
TRUE
C.
FALSE
Explanation:
http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.RDSSecurityGroups.html
C
For security groups, you allow things like MySQL or MSSQL and it picks the default port # for that product. You can do a custom security group rule where you pick the port number 🙂
B
DB Security group – When you add a rule to a group, you do not need to specify port number or protocol.
VPC Security group – When you add a rule to a group, you should specify the protocol as TCP, and specify the same port number that you used to create the DB instances (or Options) you plan to add as members to the group.
=>C
specify the same port number that you used to create the DB instances (or Options) you plan to add as members to the group.
B
B – True. There is not a port field when creating an RDS security group.
B.
You don’t need to specify a destination port number when you create DB security group rules. The port number defined for the DB instance is used as the destination port number for all rules defined for the DB security group.
This is taken from AWS website: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.RDSSecurityGroups.html