nerdexam
Amazon

SAA-C03 · Question #380

A solutions architect is designing the architecture for a two-tier web application. The web application consists of an internet-facing Application Load Balancer (ALB) that forwards traffic to an Auto

Sign in or unlock SAA-C03 to reveal the answer and full explanation for question #380. The question stem and answer options stay visible for context.

Submitted by jian89· Mar 4, 2026Design Secure Architectures

Question

A solutions architect is designing the architecture for a two-tier web application. The web application consists of an internet-facing Application Load Balancer (ALB) that forwards traffic to an Auto Scaling group of Amazon EC2 instances. The EC2 instances must be able to access an Amazon RDS database. The company does not want to rely solely on security groups or network ACLs. Only the minimum resources that are necessary should be routable from the internet. Which network design meets these requirements?

Options

  • APlace the ALB, EC2 instances, and RDS database in private subnets.
  • BPlace the ALB in public subnets. Place the EC2 instances and RDS database in private subnets.
  • CPlace the ALB and EC2 instances in public subnets. Place the RDS database in private subnets.
  • DPlace the ALB outside the VPC. Place the EC2 instances and RDS database in private subnets.

Unlock SAA-C03 to see the answer

You've previewed enough free SAA-C03 questions. Unlock SAA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full SAA-C03 Practice