Exam AWS Certified Solutions Architect - Associate SAA-C02 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Associate SAA-C02 exam

Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 59 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C02

Question #: 59
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C02 Questions]

A solutions architect is designing a two-tier web application. The application consists of a public-facing web tier hosted on Amazon EC2 in public subnets. The database tier consists of Microsoft SQL Server running on Amazon EC2 in a private subnet. Security is a high priority for the company.
How should security groups be configured in this situation? (Choose two.)

A. Configure the security group for the web tier to allow inbound traffic on port 443 from 0.0.0.0/0.
B. Configure the security group for the web tier to allow outbound traffic on port 443 from 0.0.0.0/0.
C. Configure the security group for the database tier to allow inbound traffic on port 1433 from the security group for the web tier.
D. Configure the security group for the database tier to allow outbound traffic on ports 443 and 1433 to the security group for the web tier.
E. Configure the security group for the database tier to allow inbound traffic on ports 443 and 1433 from the security group for the web tier.

Show Suggested Answer

Suggested Answer: AC 🗳️

by dsarina at Nov. 1, 2020, 5:15 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

lunamycat

Highly Voted 3 years, 10 months ago

No Brainer here. 443 inbound from internet (0.0.0.0/0) for the Web Tier (A) 1433 inbound to the database tier from the Web Tier (Security Group) (C) Answer = A & C

upvoted 33 times

Robert_B

3 years, 6 months ago

correct! SG is stateful, when we allow an inbound it gets outbound as well. So there is no outbound rule that must be specified in SG.

upvoted 5 times

...

Abdullah777

Highly Voted 3 years, 9 months ago

AC neal

upvoted 8 times

...

fro13

Most Recent 2 years, 1 month ago

Selected Answer: AC

443 internet and 1433 sql

upvoted 1 times

...

[Removed]

2 years, 7 months ago

443 inbound from internet and 1433 inbound from sqlport so A,C

upvoted 2 times

...

bora4motion

3 years, 1 month ago

Selected Answer: AC

Easy one AC

upvoted 1 times

...

ligar7

3 years, 3 months ago

Selected Answer: AC

A and C

upvoted 1 times

...

Mashuaws

3 years, 8 months ago

A and C

upvoted 1 times

...

Vibes

3 years, 9 months ago

A and C

upvoted 2 times

...

woke

3 years, 9 months ago

a and c 443 inbound from internet 1433 inbound to the database tier from the web tier

upvoted 7 times

...

syu31svc

3 years, 9 months ago

Correct answers are A & C. As the secure way to configure the communication is by defining inbound on 443 from all for public facing web tier. And only the inbound access on port 1433 on database tier from security group of the web tier.

upvoted 2 times

...