Design Secure Architectures Practice Question

Question

For a public application, an architect is reviewing VPC subnet design requirement set 17. Which design choice best fits the requirement while following AWS architectural best practices?

Answer choices

1. A. Place all components on a single large instance to simplify troubleshooting.
2. B. Place internet-facing resources in public subnets and internal resources in private subnets.
3. C. Use long-lived access keys in application configuration so services can call AWS APIs directly.
4. D. Disable monitoring until the workload reaches steady production traffic.

Correct Answer

B. Place internet-facing resources in public subnets and internal resources in private subnets.

Explanation

The best answer applies VPC subnet design: place internet-facing resources in public subnets and internal resources in private subnets. The other options increase operational risk, weaken security, or remove observability that an AWS Solutions Architect should preserve.

Question details

• Difficulty: medium
• Domain: Design Secure Architectures
• Objective: VPC subnet design

Practice more

Start Design Secure Architectures practice

Back to Design Secure Architectures