nerdexam
Amazon

SAA-C03 · Question #20

A company is designing a new multi-tier web application that consists of the following components: Web and application servers that run on Amazon EC2 instances as part of Auto Scaling groups An…

The correct answer is D. Deploy an Application Load Balancer with a target group that contains the application servers'. Application Load Balancer (ALB): ALB is suitable for routing HTTP/HTTPS traffic to the application servers. It provides advanced routing features and integrates well with Auto Scaling Target Group Configuration: Create a target group for the application servers and register the…

Submitted by carlos_mx· Mar 4, 2026Design Secure Architectures

Question

A company is designing a new multi-tier web application that consists of the following components:

Web and application servers that run on Amazon EC2 instances as part of Auto Scaling groups An Amazon RDS DB instance for data storage A solutions architect needs to limit access to the application servers so that only the web servers can access them. Which solution will meet these requirements?

Options

  • ADeploy AWS PrivateLink in front of the application servers. Configure the network ACL to allow
  • BDeploy a VPC endpoint in front of the application servers Configure the security group to allow
  • CDeploy a Network Load Balancer with a target group that contains the application servers' Auto
  • DDeploy an Application Load Balancer with a target group that contains the application servers'

How the community answered

(39 responses)
  • A
    5% (2)
  • B
    3% (1)
  • C
    13% (5)
  • D
    79% (31)

Explanation

Application Load Balancer (ALB): ALB is suitable for routing HTTP/HTTPS traffic to the application servers. It provides advanced routing features and integrates well with Auto Scaling Target Group Configuration: Create a target group for the application servers and register the Auto Scaling group with this Configure the ALB to forward requests from the web servers to the application servers. Security Group Setup: Configure the security group of the application servers to only allow traffic from the web servers' This ensures that only the web servers can access the application servers, meeting the requirement to limit access. Security: Using security groups to restrict access ensures a secure environment where only intended traffic is allowed. Scalability: ALB works seamlessly with Auto Scaling groups, ensuring the application can handle varying loads efficiently.

Community Discussion

No community discussion yet for this question.

Full SAA-C03 Practice