Exams / SAA-C03 / Security groups and network ACLs

Security groups and network ACLs: SAA-C03 practice questions

3 free questions on Security groups and network ACLs, from the Design Secure Architectures domain (30% of the SAA-C03 exam guide). Every question is original and explains why each option is right or wrong.

Questions

1. A retailer is launching a web application with the network design shown in the diagram. An internet-facing Application Load Balancer (ALB) in the public subnets forwards HTTPS…Medium · choose 2
2. A news website runs on Amazon EC2 instances in one public subnet, and the instances use several different security groups. Monitoring shows a flood of malicious requests from the…Easier
3. A company runs AWS Lambda functions in private subnets of a VPC so that they can query an Amazon RDS database in the same subnets. The functions must now also read and write…Medium

Study Security groups and network ACLs

• Control traffic to your AWS resources

More Design Secure Architectures topics

• IAM roles and policies (3)
• S3 encryption (1)
• Secrets management (2)
• Multi-account governance and auditing (2)
• S3 access control (2)
• Edge protection with AWS WAF and Shield (1)
• Threat detection and data discovery (2)
• Application user sign-in (1)
• Encryption at rest and in transit (2)