Exam AWS Certified SysOps Administrator - Associate All Questions

View all questions & answers for the AWS Certified SysOps Administrator - Associate exam

Exam AWS Certified SysOps Administrator - Associate topic 1 question 52 discussion

Exam question from Amazon's AWS Certified SysOps Administrator - Associate

Question #: 52
Topic #: 1

[All AWS Certified SysOps Administrator - Associate Questions]

A new application runs on Amazon EC2 instances and accesses data in an Amazon RDS database instance. When fully deployed in production, the application fails. The database can be queried from a console on a bastion host. When looking at the web server logs, the following error is repeated multiple times:
*** Error Establishing a Database Connection
Which of the following may be causes of the connectivity problems? (Choose two.)

A. The security group for the database does not have the appropriate egress rule from the database to the web server.
B. The certificate used by the web server is not trusted by the RDS instance.
C. The security group for the database does not have the appropriate ingress rule from the web server to the database.
D. The port used by the application developer does not match the port specified in the RDS configuration.
E. The database is still being created and is not available for connectivity.

Show Suggested Answer

Suggested Answer: CD 🗳️

by princajen at Sept. 1, 2022, 10:02 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

sxti

Highly Voted 2 years ago

Selected Answer: CD

CD because you are not stupid

upvoted 12 times

Vinsmoke

1 year, 8 months ago

unfortunately, i decided to ignore that a bastion had connectivity.

upvoted 2 times

...

Aamee

Most Recent 8 months ago

Selected Answer: CD

C & D straightfoward..

upvoted 1 times

...

auxwww

1 year ago

Selected Answer: CD

Bastion host is connecting, so DB is up! Which leaves C and D

upvoted 3 times

...

komorebi

1 year, 1 month ago

Selected Answer: CD

CD for sure

upvoted 1 times

...

Nowon

1 year, 3 months ago

Selected Answer: CD

Because of bastion host can queries to database

upvoted 1 times

...

Suksay

1 year, 4 months ago

Selected Answer: CD

Not E because in subject : The database can be queried from a console on a bastion host.

upvoted 1 times

...

Passexam4sure_com

1 year, 8 months ago

Selected Answer: CD

C. The security group for the database does not have the appropriate ingress rule from the web server to the database. D. The port used by the application developer does not match the port specified in the RDS configuration.

upvoted 3 times

...

DennisRichard

1 year, 8 months ago

Who behind the scenes is marking these 'correct' options? The question clearly states that the bastion host is able to query the database and yet the 'correct' answer is 'instance is still being created'?!?!?!?! Why Lord Why? hahaha This question bank is making me more nervous about the exam than I should be feeling.

upvoted 2 times

...

sidneyalpagel

1 year, 8 months ago

CD because the application is fully deployed. So... database not ready doesnt make sense to me

upvoted 1 times

...

AShahine21

1 year, 12 months ago

C and E For D, I don't know who is stupid enough to use the wrong Database RDS Port.

upvoted 2 times

xSohox

1 year, 10 months ago

You need to read questions more attentively. "The database can be queried from a console on a bastion host."

upvoted 3 times

...

wh1t4k3r

1 year, 9 months ago

For these tests I strongly advise you to base your answers on technicality and not personal experience.

upvoted 1 times

...

wh1t4k3r

1 year, 9 months ago

E is not valid since the access is possible through the bastion.

upvoted 1 times

...

piavik

2 years, 2 months ago

Selected Answer: CD

A and D A - incorrect, database does not connect to web application B - incorrect, web server cert is not relevant to database connection E - incorrect, all is working from bastion host, so database is OK

upvoted 2 times

...

squeeze_talus0y

2 years, 5 months ago

Selected Answer: CD

C and D

upvoted 4 times

...

MrMLB

2 years, 6 months ago

A and C are possible causes of the connectivity problems. A is a possible cause because the security group for the database controls which other resources can access the database. If the security group does not have the appropriate egress rule from the database to the web server, the web server will not be able to access the database. C is a possible cause because the security group for the database also controls which other resources can access the database. If the security group does not have the appropriate ingress rule from the web server to the database, the web server will not be able to access the database. B, D, and E are not likely causes of the connectivity problems. The certificate used by the web server is not relevant to the connectivity between the web server and the RDS instance. The port used by the application developer does not need to match the port specified in the RDS configuration, and the database being created is not relevant to the connectivity problems.

upvoted 1 times

DennisRichard

1 year, 8 months ago

There are no 'egress' rules in a security group. You must be thinking of NACLs instead.

upvoted 2 times

...

Bhrino

2 years, 3 months ago

is c and D because it indicates that there is an inbound connection issue which rules out A and what you said about d with the port not needing to match is just wrong. This can cause some inbound connectivity issues.

upvoted 1 times

...

marcoeu

1 year, 9 months ago

A is not possible for me because security group rules are statefull. If inbound rules are allowed then outbound rules in the same ports are allowed.

upvoted 1 times

...

michaldavid

2 years, 6 months ago

Selected Answer: C

C and D

upvoted 1 times

...

Liongeek

2 years, 7 months ago

Selected Answer: CD

Ans: C&D

upvoted 1 times

...

Surferbolt

2 years, 8 months ago

Selected Answer: CD

CD. Database can be queried from Bastion, so E is out. Security groups are stateful, so you don't have to bother with the egress rules in this situation, as long as you have the proper ingress rule.

upvoted 3 times

...

hippius

2 years, 8 months ago

Selected Answer: CD

CD because the database can be queried from the bastion

upvoted 1 times

...

Load full discussion...