nerdexam
Amazon

SAA-C03 · Question #1

SAA-C03 Question #1: Real Exam Question with Answer & Explanation

The correct answer is B. Create a VPC and two private subnets. Create the RDS cluster in the private subnets. Use AWS. Requirement Analysis: Need secure, direct connectivity from an on-premises client to an RDS cluster, accessible only when in the office. VPC with Private Subnets: Ensures the RDS cluster is not publicly accessible, enhancing security. Site-to-Site VPN: Provides secure, encrypted

Submitted by kevin_r· Mar 4, 2026Vulnerability Discovery and Analysis

Question

A company's software development team needs an Amazon RDS Multi-AZ cluster. The RDS cluster will serve as a backend for a desktop client that is deployed on premises. The desktop client requires direct connectivity to the RDS cluster. The company must give the development team the ability to connect to the cluster by using the client when the team is in the office. Which solution provides the required connectivity MOST securely?

Options

  • ACreate a VPC and two public subnets. Create the RDS cluster in the public subnets. Use AWS
  • BCreate a VPC and two private subnets. Create the RDS cluster in the private subnets. Use AWS
  • CCreate a VPC and two private subnets. Create the RDS cluster in the private subnets. Use RDS
  • DCreate a VPC and two public subnets. Create the RDS cluster in the public subnets. Create a

Explanation

Requirement Analysis: Need secure, direct connectivity from an on-premises client to an RDS cluster, accessible only when in the office. VPC with Private Subnets: Ensures the RDS cluster is not publicly accessible, enhancing security. Site-to-Site VPN: Provides secure, encrypted connection between on-premises office Create a VPC with two private subnets. Launch the RDS cluster in the private subnets. Set up a Site-to-Site VPN connection with a customer gateway in the office. Conclusion: This setup ensures secure and direct connectivity with minimal exposure, meeting the requirement for secure access from the office.

Community Discussion

No community discussion yet for this question.

Full SAA-C03 Practice