SCS-C02 · Question #148
A company is implementing a new application in a new AWS account. A VPC and subnets have been created for the application. The application has been peered to an existing VPC in another account in…
The correct answer is C. Create a new security group in the application VPC with no inbound rules. Create a new security. The VPCs are peered, so you can reference security groups in other VPCs: https://docs.aws.amazon.com/vpc/latest/peering/vpc-peering-security-groups.html
Question
A company is implementing a new application in a new AWS account. A VPC and subnets have been created for the application. The application has been peered to an existing VPC in another account in the same AWS Region for database access Amazon EC2 instances will regularly be created and terminated in the application VPC, but only some of them will need access to the databases in the peered VPC over TCP port 1521. A security engineer must ensure that only the EC2 instances that need access to the databases can access them through the network. How can the security engineer implement this solution?
Options
- ACreate a new security group in the database VPC and create an inbound rule that allows all traffic
- BCreate a new security group in the application VPC with an inbound rule that allows the IP
- CCreate a new security group in the application VPC with no inbound rules. Create a new security
- DCreate a new security group in the application VPC with an inbound rule that allows the IP
How the community answered
(21 responses)- B10% (2)
- C86% (18)
- D5% (1)
Explanation
The VPCs are peered, so you can reference security groups in other VPCs: https://docs.aws.amazon.com/vpc/latest/peering/vpc-peering-security-groups.html
Topics
Community Discussion
No community discussion yet for this question.