Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 663 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C02

Question #: 663
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C02 Questions]

A solutions architect is designing a two-tiered architecture that includes a public subnet and a database subnet. The web servers in the public subnet must be open to the internet on port 443. The Amazon RDS for MySQL DB instance in the database subnet must be accessible only to the web servers on port 3306.
Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)

A. Create a network ACL for the public subnet. Add a rule to deny outbound traffic to 0.0.0.0/0 on port 3306.
B. Create a security group for the DB instance. Add a rule to allow traffic from the public subnet CIDR block on port 3306.
C. Create a security group for the web servers in the public subnet. Add a rule to allow traffic from 0.0.0.0/0 on port 443.
D. Create a security group for the DB instance. Add a rule to allow traffic from the web servers' security group on port 3306.
E. Create a security group for the DB instance. Add a rule to deny all traffic except traffic from the web servers' security group on port 3306.

Show Suggested Answer

Suggested Answer: CD 🗳️

by rodriiviru at Oct. 3, 2022, 3:05 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

rodriiviru

2 years, 8 months ago

Selected Answer: CD

c+d makes sense

upvoted 1 times

...