Secure connection (SSL) in MySQL - Cheat Sheet & Quick Revision

Recall & Review

beginner

What does SSL stand for in database connections?

SSL stands for Secure Sockets Layer. It is a protocol that encrypts data sent between your computer and the database server to keep it safe from eavesdropping.

beginner

Why is using SSL important when connecting to a MySQL database?

Using SSL protects sensitive data like passwords and queries by encrypting the connection. This prevents attackers from reading or changing the data while it travels over the internet.

intermediate

Which MySQL client option enables SSL for a connection?

The option is --ssl-mode=REQUIRED or --ssl. This tells MySQL to use SSL encryption when connecting to the server.

intermediate

Name the three main certificate files used in MySQL SSL connections.

They are:<br>1. CA certificate (Certificate Authority)<br>2. Client certificate<br>3. Client private key<br>These files help verify identities and encrypt the connection.

advanced

What does the MySQL SSL mode VERIFY_CA do?

It requires the client to verify that the server's certificate is signed by a trusted Certificate Authority (CA). This adds trust that you are connecting to the right server.

What is the main purpose of using SSL in MySQL connections?

A To encrypt data between client and server

B To speed up the connection

C To compress data sent over the network

D To backup the database automatically

SSL encrypts data to keep it safe from being read by others during transmission.

Which MySQL client option forces SSL encryption?

A --ssl-mode=DISABLED

B --no-ssl

C --ssl-mode=REQUIRED

D --skip-ssl

The option --ssl-mode=REQUIRED tells MySQL to use SSL encryption for the connection.

Which certificate verifies the identity of the server in SSL?

A CA certificate

B Client private key

C Client certificate

D User password

The CA certificate is used to verify that the server's certificate is trusted.

What does the SSL mode VERIFY_IDENTITY do in MySQL?

A Encrypts data without verification

B Disables SSL encryption

C Allows unencrypted fallback

D Verifies server certificate and hostname

VERIFY_IDENTITY checks both the server certificate and that the hostname matches, increasing security.

If SSL is not enabled, what risk exists when connecting to MySQL over the internet?

A No risk, SSL is optional

B Data can be read or changed by attackers

C Database will automatically backup

D Connection will be faster

Without SSL, data travels unencrypted and can be intercepted or altered by attackers.

Explain how SSL secures a MySQL database connection and why it is important.

Think about how data travels over the internet and what risks SSL helps avoid.

List the certificate files needed for MySQL SSL connection and describe their roles.

Certificates help prove who is who and keep data safe.