AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 74

Question

A solutions architect is designing a two-tier web application. The application consists of a public-facing web tier hosted on Amazon EC2 in public subnets. The database tier consists of Microsoft SQL Server running on Amazon EC2 in a private subnet. Security is a high priority for the company. How should security groups be configured in this situation? (Choose two.)

Accepted Answer

Correct answer: A, C. The correct answer is A, C. Option A: Configure the security group for the web tier to allow inbound traffic on port 443 from 0.0.0.0/0. Option C: Configure the security group for the database tier to allow inbound traffic on port 1433 from the security group for the web tier. AWS Config tracks resource configuration changes and evaluates compliance.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 74