Bird
0
0

You want to host a web server accessible from the internet and a database only accessible internally. How should you design your subnets?

hard📝 Best Practice Q15 of 15
AWS - VPC Fundamentals
You want to host a web server accessible from the internet and a database only accessible internally. How should you design your subnets?
APlace both web server and database in private subnets and use a VPN for access.
BPlace both web server and database in a public subnet with security groups restricting access.
CPlace the web server in a private subnet and the database in a public subnet.
DPlace the web server in a public subnet and the database in a private subnet.
Step-by-Step Solution
Solution:
  1. Step 1: Identify subnet roles for internet access

    The web server needs internet access, so it belongs in a public subnet with a route to the internet gateway.
  2. Step 2: Secure the database internally

    The database should be in a private subnet without direct internet access to keep it secure.
  3. Final Answer:

    Place the web server in a public subnet and the database in a private subnet. -> Option D
  4. Quick Check:

    Internet-facing resources in public, internal in private [OK]
Quick Trick: Web server public, database private subnet [OK]
Common Mistakes:
  • Putting database in public subnet
  • Putting web server in private subnet
  • Relying only on security groups without subnet design

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More AWS Quizzes