Google
ASSOCIATE-CLOUD-ENGINEER · Question #263
You have two subnets (subnet-a and subnet-b) in the default VPC. Your database servers are running in subnet-a. Your application servers and web servers are running in subnet-b. You want to configure
Sign in or unlock ASSOCIATE-CLOUD-ENGINEER to reveal the answer and full explanation for question #263. The question stem and answer options stay visible for context.
Submitted by tunde_lagos· Mar 30, 2026Configuring access and security
Question
You have two subnets (subnet-a and subnet-b) in the default VPC. Your database servers are running in subnet-a. Your application servers and web servers are running in subnet-b. You want to configure a firewall rule that only allows database traffic from the application servers to the database servers. What should you do?
Options
- A
- Create service accounts sa-app and sa-db.
- B
- Create network tags app-server and db-server.
- C
- Create a service account sa-app and a network tag db-server.
- D
- Create a network tag app-server and service account sa-db.
Unlock ASSOCIATE-CLOUD-ENGINEER to see the answer
You've previewed enough free ASSOCIATE-CLOUD-ENGINEER questions. Unlock ASSOCIATE-CLOUD-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#VPC firewall rules#service accounts#network tags#least privilege