MySQL 8.0 Database Administrator — Question 2

Examine this MySQL client command to connect to a remote database: mysql -h remote.example.org -u root -p --protocol=TCP --ssl-mode=
Which two --ssl-mode values will ensure that an X.509-compliant certificate will be used to establish the SSL/TLS connection to MySQL?

Answer options

• A. REQUIRED
• B. VERIFY_CA
• C. VERIFY_IDENTITY
• D. PREFERRED
• E. DISABLED

Correct answer: B

Explanation

The correct answer is B, as VERIFY_CA ensures that the server's certificate is verified against a Certificate Authority. While REQUIRED also enables SSL, it does not enforce certificate verification, making VERIFY_CA the better choice for compliance with X.509 standards. The other options either do not enforce certificate validation or disable SSL altogether.