Home / Amazon / SAA-C01 / Question 16

A Solution Architect is designing a three-tier web application. The Architect wants to restrict access to the database tier to accept traffic from the application servers only. However, these application servers are in an Auto Scaling group and may vary in quantity.How should the Architect configure the database servers to meet the requirements?

• A. Configure the database security group to allow database traffic from the application server IP addresses.

• B. Configure the database security group to allow database traffic from the application server security group.

• C. Configure the database subnet network ACL to deny all inbound non-database traffic from the application-tier subnet.

• D. Configure the database subnet network ACL to allow inbound database traffic from the application-tier subnet.