LFCA: Linux Foundation Certified IT Associate

By Linux Foundation · Question Mode

QuestionQ61

VerifiedCloud Computing Fundamentals

A Linux Administrator is reviewing a technical architecture diagram for a Linux-based web application deployed in a cloud environment. The diagram includes:

  • A public subnet containing a load balancer.
  • Two Linux web servers in a private subnet behind the load balancer.
  • A database server in a separate private subnet, accessible only by the web servers.
  • Security groups that restrict traffic:
    • The load balancer permits inbound traffic on ports 80 and 443.
    • The web servers permit inbound traffic on port 80 only from the load balancer.
    • The database server permits inbound traffic on port 3306 only from the web servers.

Based on this architecture, which statement is most accurate?

Explanation

Private-subnet web servers whose inbound security-group rule permits port 80 only from the load balancer are not directly reachable from the internet; HTTP traffic reaches them through the public load balancer. An internet gateway is required for internet connectivity, and security groups restrict allowed inbound traffic. Amazon VPC documentation

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!