Examkin

Soru

Zorluk: KolayAWS Network Services

An organization is designing a two-tier application in an Amazon VPC. The database tier must be completely isolated from direct inbound internet traffic, while the web tier must accept public web traffic from the internet. Which two configuration options will meet these requirements? (Select TWO.)

  1. Configure a public subnet with a route pointing to an Internet Gateway for the web tierCevap
  2. Configure a private subnet without a route pointing to an Internet Gateway for the database tierCevap
  3. C
    Establish a VPC Peering connection between the public and private subnets to enable internal routing
  4. D
    Deploy an AWS Transit Gateway to route public internet traffic directly to the private subnet
  5. E
    Apply a stateless Network ACL directly to the database instances to filter incoming traffic

Cevap

Configure a public subnet with a route pointing to an Internet Gateway for the web tier, and configure a private subnet without a route pointing to an Internet Gateway for the database tier.
The correct architecture uses a public subnet with a route to an Internet Gateway to allow web traffic to reach the web tier, and a private subnet without an Internet Gateway route to keep the database tier isolated. Communication between subnets in the same VPC is enabled by default via local routing, so VPC Peering or Transit Gateway are not required.

Adım Adım Çözüm

1
Identify the requirement for the web tier.
The web tier must accept public web traffic, which requires placing it in a public subnet that has a route to an Internet Gateway.
An Internet Gateway is the VPC component that enables communication between resources in the VPC and the internet.
2
Identify the requirement for the database tier.
The database tier must be isolated from direct internet access, which requires placing it in a private subnet with no route to an Internet Gateway.
Preventing a route to the Internet Gateway ensures that the resources cannot be accessed directly from the public internet.

Anahtar Kavram

VPC Subnet Types and Routing (Public vs. Private Subnets)
Bu soruyu puanla

Konular

AWS Network Services

Bu konudan daha fazla soru