Examkin

Question

Difficulty: MediumNetwork and Infrastructure Security

A media company is hosting a public-facing live video streaming ingest service on Amazon EC2 instances. The administrator needs to permit incoming traffic on port 1935 (RTMP) and ensure that outbound response traffic is automatically permitted back to the client without configuring any outbound rules. Which AWS security resource should be configured to meet this requirement?

  1. A
    Network Access Control Lists (NACLs)
  2. B
    Amazon GuardDuty
  3. Security groupsAnswer
  4. D
    AWS Shield Standard

Answer

Security groups
Security groups are stateful firewalls that operate at the instance level. When an inbound rule is created to allow traffic, the return outbound traffic is automatically allowed, making it the correct choice for this scenario.

Step-by-Step Solution

1
Analyze the traffic requirement
The requirement is to allow inbound traffic on a specific port (1935) and automatically allow the return/outbound traffic without manually writing outbound rules.
This behavior indicates a stateful firewall resource that operates at the instance level.
2
Evaluate the stateful vs. stateless nature of AWS firewalls
Security groups are stateful and automatically permit return traffic, while Network ACLs are stateless and require explicit return rules.
Choosing security groups satisfies the requirement of automatically permitting outbound response traffic.

Key Concept

Stateful filtering with Security Groups
Estimated Time:1m 0s
Rate this question

Topics

Network and Infrastructure Security

More questions from this topic