nerdexam
Amazon

SCS-C02 · Question #386

You have a set of application , database and web servers hosted in AWS. The web servers are placed behind an ELB. There are separate security groups for the application, database and web servers…

The correct answer is A. Check the Inbound security rules for the database security group Check the Outbound security. Here since the communication would be established inward to the database server and outward from the application server, you need to ensure that just the Outbound rules for application server security groups are checked. And then just the Inbound rules for database server…

Submitted by fatima_kr· Mar 6, 2026Infrastructure Security

Question

You have a set of application , database and web servers hosted in AWS. The web servers are placed behind an ELB. There are separate security groups for the application, database and web servers. The network security groups have been defined accordingly. There is an issue with the communication between the application and database servers. In order to troubleshoot the issue between just the application and database server, what is the ideal set of MINIMAL steps you would take?

Options

  • ACheck the Inbound security rules for the database security group Check the Outbound security
  • BCheck the Outbound security rules for the database security group I Check the inbound security
  • CCheck the both the Inbound and Outbound security rules for the database security group Check
  • DCheck the Outbound security rules for the database security group Check the both the Inbound

How the community answered

(20 responses)
  • A
    80% (16)
  • B
    10% (2)
  • C
    5% (1)
  • D
    5% (1)

Explanation

Here since the communication would be established inward to the database server and outward from the application server, you need to ensure that just the Outbound rules for application server security groups are checked. And then just the Inbound rules for database server security groups Option B can't be the correct answer. It says that we need to check the outbound security group which is not needed. We need to check the inbound for DB SG and outbound of Application SG. Because, this two group need to communicate with each other to function properly. Option C is invalid because you don't need to check for Outbound security rules for the database Option D is invalid because you don't need to check for Inbound security rules for the application

Topics

#security groups#inbound rules#outbound rules#network troubleshooting

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice