To improve security, an architect wants the web servers in the private subnet to ONLY accept traffic from the ALB. What should be done?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Configure the web server's Security Group to allow inbound traffic from the ALB's Security Group

Referencing the ALB security group in the instance's security group is the most secure and scale-friendly approach....

📋Part of AWS Certified Solutions Architect – Associate (SAA-C03) · AWS Certification Practice
Real Exam ScenarioApplication Load Balancer

To improve security, an architect wants the web servers in the private subnet to ONLY accept traffic from the ALB. What should be done?

✓ Correct Answer & ExplanationApplication Load Balancer

Correct Answer

Configure the web server's Security Group to allow inbound traffic from the ALB's Security Group

Why This Answer Is Correct

Referencing the ALB security group in the instance's security group is the most secure and scale-friendly approach.

📚 What This Question Tests

This question evaluates your knowledge of Application Load Balancer — a core concept tested in AWS Certified Solutions Architect – Associate (SAA-C03). Understanding Application Load Balancer is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.