Text-based stimulus: Network map titled 'Public web tier and private data tier' with Internet Browser at far left, Public Subnet containing Load Balancer and Web Server, Private Subnet containing Database. Solid arrow Browser to Load Balancer to Web Server labeled 'HTTPS request'. Solid arrow Web Server to Database labeled 'private database connection'. Red blocked line from Browser to Database labeled 'not allowed'.
A network diagram shows the database on a private subnet and the web server on a public subnet. Which rule best matches secure architecture?