1.Why is the web tier placed in a public subnet while the Application and Database tiers are kept in private subnet?
Reduced attack surface. Attackers can only touch the web tier directly. To reach the database they'd have to break through two more layers.
