Correct Answer: Allow inbound traffic on the DB port with the Web Server Security Group as the source
Nesting security groups (using one as the source for another) ensures only specific application components can talk to the database, regardless of their IP addresses....
Correct Answer
Allow inbound traffic on the DB port with the Web Server Security Group as the source
Why This Answer Is Correct
Nesting security groups (using one as the source for another) ensures only specific application components can talk to the database, regardless of their IP addresses.
This question evaluates your knowledge of Security Groups — a core concept tested in AWS Certified Solutions Architect – Associate (SAA-C03). Understanding Security Groups is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You need stateful firewall rules at the Amazon EC2 instance level. What should you configure?
Which statement correctly describes the nature of Security Groups in AWS?
How do Network ACLs differ from Security Groups in terms of rule evaluation?
An architect needs to block a specific IP address that is launching a DDoS attack on the web servers. Where should this block be implemented?
A security group is associated with an EC2 instance. The group has an inbound rule allowing port 80 (HTTP) from 0.0.0.0/0. What happens to the outbound traffic from the instance on port 80?