A company is designing an application to run in a VPC on AWS. The application consists of Amazon EC2 instances that run in private subnets as part of an Auto Scaling group. The application also includes a Network Load Balancer that extends across public subnets. The application stores data in an Amazon RDS DB instance.
The company has attached a security group that is named “web-servers” to the EC2 instances.
The company has attached a security group that is named “database” to the DB instance.
How should a solutions architect configure the communication between the EC2 instances and the DB instance?
A. Configure the “web-servers” security group to allow access to the DB instance’s current IP addresses. Configure the “database” security group to allow access from the current set of IP addresses in use by the EC2 instances.
B. Configure the “web-servers” security group to allow access to the “database” security group.
Configure the “database” security group to allow access from the “web-servers” security group.
C. Configure the “web-servers” security group to allow access to the DB instance’s current IP addresses. Configure the “database” security group to allow access from the Auto Scaling group.
D. Configure the “web-servers” security group to allow access to the “database” security group.
Configure the “database” security group to allow access from the Auto Scaling group.
How To Pass SAA-C02 Exam?Amazon SAA-C02 PDF dumps.High quality SAA-C02 pdf and software. VALID exam to help you pass. |
 |
