A systems administrator is configuring a security group for an Amazon EC2 instance hosting a web server. The administrator adds an inbound rule to allow HTTP traffic on port 80 from any source. What additional configuration is required in the security group to allow the web server to send outbound HTTP responses back to the clients?
- AAn outbound rule must be added to allow HTTP traffic on port 80 to the client's destination IP address.
- BAn outbound rule must be added to allow traffic on ephemeral ports (1024-65535) back to the clients.
- No additional configuration is required because security groups are stateful, meaning return traffic is automatically allowed.Answer
- DAWS WAF must be associated with the security group to allow outbound HTTP responses to the clients.
Answer
No additional configuration is required because security groups are stateful, meaning return traffic is automatically allowed.
The correct answer is correct because AWS security groups are stateful. When an inbound rule allows traffic on port 80, the security group tracks the connection and automatically allows the web server to send outbound responses back to the client, requiring no outbound security group rules for this communication.
Step-by-Step Solution
Key Concept
VPC Security Group Statefulness