ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified SysOps Administrator - Associate All Questions

View all questions & answers for the AWS Certified SysOps Administrator - Associate exam
Go to Exam

Exam AWS Certified SysOps Administrator - Associate topic 1 question 52 discussion

Exam question from Amazon's AWS Certified SysOps Administrator - Associate
Question #: 52
Topic #: 1
[All AWS Certified SysOps Administrator - Associate Questions]

A new application runs on Amazon EC2 instances and accesses data in an Amazon RDS database instance. When fully deployed in production, the application fails. The database can be queried from a console on a bastion host. When looking at the web server logs, the following error is repeated multiple times:
*** Error Establishing a Database Connection
Which of the following may be causes of the connectivity problems? (Choose two.)

  • A. The security group for the database does not have the appropriate egress rule from the database to the web server.
  • B. The certificate used by the web server is not trusted by the RDS instance.
  • C. The security group for the database does not have the appropriate ingress rule from the web server to the database.
  • D. The port used by the application developer does not match the port specified in the RDS configuration.
  • E. The database is still being created and is not available for connectivity.
Show Suggested Answer Hide Answer
Suggested Answer: CD 🗳️
by princajen at Sept. 1, 2022, 10:02 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
sxti
Highly Voted 1 year, 10 months ago
Selected Answer: CD
CD because you are not stupid
upvoted 12 times
Vinsmoke
1 year, 6 months ago
unfortunately, i decided to ignore that a bastion had connectivity.
upvoted 2 times
...
...
Aamee
Most Recent 5 months, 4 weeks ago
Selected Answer: CD
C & D straightfoward..
upvoted 1 times
...
auxwww
10 months ago
Selected Answer: CD
Bastion host is connecting, so DB is up! Which leaves C and D
upvoted 3 times
...
komorebi
12 months ago
Selected Answer: CD
CD for sure
upvoted 1 times
...
Nowon
1 year, 1 month ago
Selected Answer: CD
Because of bastion host can queries to database
upvoted 1 times
...
Suksay
1 year, 2 months ago
Selected Answer: CD
Not E because in subject : The database can be queried from a console on a bastion host.
upvoted 1 times
...
Passexam4sure_com
1 year, 6 months ago
Selected Answer: CD
C. The security group for the database does not have the appropriate ingress rule from the web server to the database. D. The port used by the application developer does not match the port specified in the RDS configuration.
upvoted 3 times
...
DennisRichard
1 year, 6 months ago
Who behind the scenes is marking these 'correct' options? The question clearly states that the bastion host is able to query the database and yet the 'correct' answer is 'instance is still being created'?!?!?!?! Why Lord Why? hahaha This question bank is making me more nervous about the exam than I should be feeling.
upvoted 2 times
...
sidneyalpagel
1 year, 6 months ago
CD because the application is fully deployed. So... database not ready doesnt make sense to me
upvoted 1 times
...
AShahine21
1 year, 10 months ago
C and E For D, I don't know who is stupid enough to use the wrong Database RDS Port.
upvoted 2 times
xSohox
1 year, 8 months ago
You need to read questions more attentively. "The database can be queried from a console on a bastion host."
upvoted 3 times
...
wh1t4k3r
1 year, 7 months ago
For these tests I strongly advise you to base your answers on technicality and not personal experience.
upvoted 1 times
...
wh1t4k3r
1 year, 7 months ago
E is not valid since the access is possible through the bastion.
upvoted 1 times
...
...
piavik
2 years ago
Selected Answer: CD
A and D A - incorrect, database does not connect to web application B - incorrect, web server cert is not relevant to database connection E - incorrect, all is working from bastion host, so database is OK
upvoted 2 times
...
squeeze_talus0y
2 years, 3 months ago
Selected Answer: CD
C and D
upvoted 4 times
...
MrMLB
2 years, 4 months ago
A and C are possible causes of the connectivity problems. A is a possible cause because the security group for the database controls which other resources can access the database. If the security group does not have the appropriate egress rule from the database to the web server, the web server will not be able to access the database. C is a possible cause because the security group for the database also controls which other resources can access the database. If the security group does not have the appropriate ingress rule from the web server to the database, the web server will not be able to access the database. B, D, and E are not likely causes of the connectivity problems. The certificate used by the web server is not relevant to the connectivity between the web server and the RDS instance. The port used by the application developer does not need to match the port specified in the RDS configuration, and the database being created is not relevant to the connectivity problems.
upvoted 1 times
DennisRichard
1 year, 6 months ago
There are no 'egress' rules in a security group. You must be thinking of NACLs instead.
upvoted 2 times
...
Bhrino
2 years, 1 month ago
is c and D because it indicates that there is an inbound connection issue which rules out A and what you said about d with the port not needing to match is just wrong. This can cause some inbound connectivity issues.
upvoted 1 times
...
marcoeu
1 year, 7 months ago
A is not possible for me because security group rules are statefull. If inbound rules are allowed then outbound rules in the same ports are allowed.
upvoted 1 times
...
...
michaldavid
2 years, 4 months ago
Selected Answer: C
C and D
upvoted 1 times
...
Liongeek
2 years, 5 months ago
Selected Answer: CD
Ans: C&D
upvoted 1 times
...
Surferbolt
2 years, 6 months ago
Selected Answer: CD
CD. Database can be queried from Bastion, so E is out. Security groups are stateful, so you don't have to bother with the egress rules in this situation, as long as you have the proper ingress rule.
upvoted 3 times
...
hippius
2 years, 6 months ago
Selected Answer: CD
CD because the database can be queried from the bastion
upvoted 1 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago