nerdexam
Amazon

SCS-C02 · Question #315

You have a 2 tier application hosted in AWS. It consists of a web server and database server (SQL Server) hosted on separate EC2 Instances. You are devising the security groups for these EC2…

The correct answer is A. wg-123 -Allow ports 80 and 443 from 0.0.0.0/0 B. db-345 - Allow port 1433 from wg-123. The Web security groups should allow access for ports 80 and 443 for HTTP and HTTPS traffic to all users from the internet. The database security group should just allow access from the web security group from port 1433. Option C is invalid because this is not a valid…

Submitted by mike_84· Mar 6, 2026Infrastructure Security

Question

You have a 2 tier application hosted in AWS. It consists of a web server and database server (SQL Server) hosted on separate EC2 Instances. You are devising the security groups for these EC2 Instances. The Web tier needs to be accessed by users across the Internet. You have created a web security group(wg- 123) and database security group(db- 345). Which combination of the following security group rules will allow the application to be secure and functional. Choose 2 answers from the options given below.

Options

  • Awg-123 -Allow ports 80 and 443 from 0.0.0.0/0
  • Bdb-345 - Allow port 1433 from wg-123
  • Cwg-123 - Allow port 1433 from wg-123
  • Ddb-345 -Allow ports 1433 from 0.0.0.0/0

How the community answered

(26 responses)
  • A
    81% (21)
  • C
    8% (2)
  • D
    12% (3)

Explanation

The Web security groups should allow access for ports 80 and 443 for HTTP and HTTPS traffic to all users from the internet. The database security group should just allow access from the web security group from port 1433. Option C is invalid because this is not a valid configuration Option D is invalid because database security should not be allowed on the internet https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/usins-network-security.html

Topics

#security groups#least privilege#multi-tier architecture#port rules

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice