In a multi-tier AWS architecture, if the database tier is configured in a public subnet with a security group allowing all inbound traffic, what is the likely outcome?

medium📝 service behavior Q5 of 15

AWS - Architecture Best Practices

ADatabase remains secure due to AWS default protections

BDatabase automatically moves to a private subnet

CDatabase cannot be accessed by the app tier

DDatabase is exposed to the internet and vulnerable

Step-by-Step Solution

Solution:

Step 1: Understand subnet and security group roles
Public subnet exposes resources to the internet; security groups control traffic.
Step 2: Analyze effect of open inbound rules
Allowing all inbound traffic exposes the database to anyone on the internet.
Final Answer:
Database is exposed to the internet and vulnerable -> Option D
Quick Check:
Public subnet + open SG = exposed DB = B [OK]

Quick Trick: Open inbound rules on public subnet = security risk [OK]

Common Mistakes:

Assuming AWS auto-secures exposed DB
Thinking app tier can't access DB
Believing AWS moves DB automatically

Master "Architecture Best Practices" in AWS

9 interactive learning modes - each teaches the same concept differently

Learn Why Deep Visual Try Challenge Project Recall Time

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions

More AWS Quizzes

In a multi-tier AWS architecture, if the database tier is configured in a public subnet with a security group allowing all inbound traffic, what is the likely outcome?

Step 1: Understand subnet and security group roles

Step 2: Analyze effect of open inbound rules

Final Answer:

Quick Check:

Want More Practice?