Exam AWS Certified Solutions Architect - Associate SAA-C03 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Associate SAA-C03 exam

Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 392 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C03

Question #: 392
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C03 Questions]

A company wants to deploy a new public web application on AWS. The application includes a web server tier that uses Amazon EC2 instances. The application also includes a database tier that uses an Amazon RDS for MySQL DB instance.

The application must be secure and accessible for global customers that have dynamic IP addresses.

How should a solutions architect configure the security groups to meet these requirements?

A. Configure the security group for the web servers to allow inbound traffic on port 443 from 0.0.0.0/0. Configure the security group for the DB instance to allow inbound traffic on port 3306 from the security group of the web servers.
B. Configure the security group for the web servers to allow inbound traffic on port 443 from the IP addresses of the customers. Configure the security group for the DB instance to allow inbound traffic on port 3306 from the security group of the web servers.
C. Configure the security group for the web servers to allow inbound traffic on port 443 from the IP addresses of the customers. Configure the security group for the DB instance to allow inbound traffic on port 3306 from the IP addresses of the customers.
D. Configure the security group for the web servers to allow inbound traffic on port 443 from 0.0.0.0/0. Configure the security group for the DB instance to allow inbound traffic on port 3306 from 0.0.0.0/0.

Show Suggested Answer

Suggested Answer: A 🗳️

by [deleted] at March 10, 2023, 4:18 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Bhanu1992

Highly Voted 10 months, 3 weeks ago

The keyword is dynamic IPs from the customer, then B, C out, D out due to 0.0.0.0/0

upvoted 6 times

...

awsgeek75

Highly Voted 1 year, 1 month ago

Selected Answer: A

"The application must be secure and accessible for global customers that have dynamic IP addresses." This just means "anyone" so BC are wrong as you cannot know in advance about the dynamic IP addresses. D is just opening the DB to the internet. A is most secure as web is open to internet and db is open to web only.

upvoted 6 times

...

bora4motion

Most Recent 3 months, 1 week ago

Selected Answer: A

a is 100% correct.

upvoted 1 times

...

Guru4Cloud

1 year, 5 months ago

Selected Answer: A

It allows HTTPS access from any public IP address, meeting the requirement for global customer access. HTTPS provides encryption for secure communication. And for the database security group, only allowing inbound port 3306 from the web server security group properly restricts access to only the resources that need it.

upvoted 4 times

...

jayce5

1 year, 8 months ago

Selected Answer: A

Should be A since the customer IPs are dynamically.

upvoted 2 times

...

antropaws

1 year, 8 months ago

Selected Answer: A

A no doubt.

upvoted 3 times

...

omoakin

1 year, 8 months ago

BBBBBBBBBBBBBBBBBBBBBB from customers IPs

upvoted 1 times

MostafaWardany

1 year, 8 months ago

Correct answer A, customer dynamic IPs ==>> 443 from 0.0.0.0/0

upvoted 3 times

...

TariqKipkemei

1 year, 9 months ago

Selected Answer: A

dynamic source ips = allow all traffic - Configure the security group for the web servers to allow inbound traffic on port 443 from 0.0.0.0/0. Configure the security group for the DB instance to allow inbound traffic on port 3306 from the security group of the web servers.

upvoted 2 times

...