SCS-C02 · Question #315
You have a 2 tier application hosted in AWS. It consists of a web server and database server (SQL Server) hosted on separate EC2 Instances. You are devising the security groups for these EC2…
The correct answer is A. wg-123 -Allow ports 80 and 443 from 0.0.0.0/0 B. db-345 - Allow port 1433 from wg-123. The Web security groups should allow access for ports 80 and 443 for HTTP and HTTPS traffic to all users from the internet. The database security group should just allow access from the web security group from port 1433. Option C is invalid because this is not a valid…
Question
You have a 2 tier application hosted in AWS. It consists of a web server and database server (SQL Server) hosted on separate EC2 Instances. You are devising the security groups for these EC2 Instances. The Web tier needs to be accessed by users across the Internet. You have created a web security group(wg- 123) and database security group(db- 345). Which combination of the following security group rules will allow the application to be secure and functional. Choose 2 answers from the options given below.
Options
- Awg-123 -Allow ports 80 and 443 from 0.0.0.0/0
- Bdb-345 - Allow port 1433 from wg-123
- Cwg-123 - Allow port 1433 from wg-123
- Ddb-345 -Allow ports 1433 from 0.0.0.0/0
How the community answered
(26 responses)- A81% (21)
- C8% (2)
- D12% (3)
Explanation
The Web security groups should allow access for ports 80 and 443 for HTTP and HTTPS traffic to all users from the internet. The database security group should just allow access from the web security group from port 1433. Option C is invalid because this is not a valid configuration Option D is invalid because database security should not be allowed on the internet https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/usins-network-security.html
Topics
Community Discussion
No community discussion yet for this question.