Practice Test 4 | AWS Certified Solutions Architect Associate | SAA-C03 | Dumps | Mock Test
You plan on hosting a web application consisting of a web server and a database server. These servers are going to be hosted on different EC2 Instances in different subnets in a VPC. Which of the following can be used to ensure that the database server only allows traffic from the web server?
A. Make use of Security Groups.
B. Make use of VPC Flow Logs.
C. Make use of Network Access Control Lists.
D. Make use of IAM Roles.
Explanation:
Answer – A
Security groups can be used to control traffic into an EC2 Instance.
For more information on this use case scenario, please visit the following URL:
Note:
NACL is used when you want deny the access for Particular IP address or the CIDR block(Set of IP address).
So, The simple funda here is that if the requirement allows the traffic, then you can go with the Security Group.
if the requirement mentioned like denies (Not allow) the traffic, then you can go with the NACL.
Comments are closed, but trackbacks and pingbacks are open.