200-301 Question 43
Select 2A company is deploying a two-tier architecture for a new application. The application tier and database tier need to communicate securely over a private network. How should the network setup be designed to ensure communication between the tiers while maintaining security and scalability?
- A
Deploy the application tier and database tier in the same subnet to avoid unnecessary routing.
- B
Use a security group or access control list (ACL) to restrict traffic between the application tier and database tier.
- C
Enable public IP addresses for both tiers to ensure connectivity.
- D
Implement private IP addressing between the tiers and use a load balancer for the application tier.
- E
Use a VPN to connect the application tier and database tier over the internet for secure communication.
Show answer and explanation
Correct answers: B, D
Explanation
In a two-tier architecture, the application tier and database tier need to communicate securely while remaining scalable. Using private IP addressing for internal communication ensures security, and a load balancer can manage traffic effectively for the application tier. Security groups or ACLs further restrict access, allowing only the required traffic between the tiers. Public IP addresses or VPNs are not suitable for this scenario, as they either reduce security or increase complexity unnecessarily.
- A. Incorrect.
Deploying both tiers in the same subnet can simplify routing but does not provide optimal scalability or security isolation, which is essential for a production environment.
- B. Correct.
Using a security group or ACL to restrict traffic ensures that only specific ports and protocols are allowed between the tiers, enhancing security.
- C. Incorrect.
Enabling public IP addresses for the tiers would expose them to the internet, which is not secure or recommended for two-tier architectures.
- D. Correct.
Using private IP addressing ensures secure, internal communication, and a load balancer can help manage traffic to the application tier, improving scalability.
- E. Incorrect.
A VPN is unnecessary when both tiers are within the same internal network and can introduce additional complexity and latency.