Bird
0
0

In a multi-tier AWS architecture, which subnet configuration is most appropriate for the data storage layer to ensure security and isolation?

easy📝 Conceptual Q3 of 15
AWS - Architecture Best Practices
In a multi-tier AWS architecture, which subnet configuration is most appropriate for the data storage layer to ensure security and isolation?
APublic subnet with an internet gateway
BPrivate subnet with no direct internet access
CPublic subnet with a NAT gateway
DPrivate subnet with a direct route to the internet
Step-by-Step Solution
Solution:
  1. Step 1: Identify the role of the data storage layer

    The database tier stores sensitive data and requires protection from direct internet exposure.
  2. Step 2: Choose subnet type for security

    Private subnets do not have direct internet access, reducing attack surface.
  3. Step 3: Evaluate other options

    Public subnets expose resources to the internet, which is not secure for databases.
  4. Final Answer:

    Private subnet with no direct internet access -> Option B
  5. Quick Check:

    Database tier should be isolated in private subnet [OK]
Quick Trick: Database tier goes in private subnet without internet access [OK]
Common Mistakes:
  • Placing database in public subnet
  • Using NAT gateway for database subnet
  • Assuming public subnet is secure for databases

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More AWS Quizzes