A company is designing an application to run in a VPC on AWS. The application consists of Amazon EC2 instances that run in private subnets as part of an Auto Scaling group. The application also includes a Network Load Balancer that extends across public subnets. The application stores data in an Amazon RDS DB instance. The company has attached a security group that is named `web-servers` to the EC2 instances. The company has attached a security group that is named `database` to the DB instance. How should a solutions architect configure the communication between the EC2 instances and the DB instance?

Topic #: - All AWS Certified Solutions Architect - Associate SAA-C02 Questions

A. Configure the ג€web-serversג€ security group to allow access to the DB instance’s current IP addresses. Configure the ג€databaseג€ security group to allow access from the current set of IP addresses in use by the EC2 instances.
B. Configure the ג€web-serversג€ security group to allow access to the ג€databaseג€ security group. Configure the ג€databaseג€ security group to allow access from the ג€web-serversג€ security group. Most Voted
C. Configure the ג€web-serversג€ security group to allow access to the DB instance’s current IP addresses. Configure the ג€databaseג€ security group to allow access from the Auto Scaling group.
D. Configure the ג€web-serversג€ security group to allow access to the ג€databaseג€ security group. Configure the ג€databaseג€ security group to allow access from the Auto Scaling group.

- Awsexamhub website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Suggested Answer:

Share this post

Join the Discussion