Examkin

Question

Difficulty: EasyVPC Security Controls and Traffic Analysis

A SysOps Administrator is setting up an application on an Amazon EC2 instance in a custom VPC. To allow inbound SSH traffic from the administrator's IP address, the administrator adds an inbound rule to the security control. The administrator wants to ensure that the return outbound traffic from the instance back to the administrator's IP address is automatically permitted without having to define any additional outbound rules. Which security control should the administrator use to meet this requirement?

  1. Security GroupsAnswer
  2. B
    Network Access Control Lists (NACLs)
  3. C
    VPC Route Tables
  4. D
    Internet Gateways

Answer

Security Groups
Security Groups are stateful security controls that operate at the instance level. When an inbound rule is added to allow SSH traffic, the Security Group automatically allows the return outbound traffic back to the client, regardless of any outbound rules configured in the Security Group.

Step-by-Step Solution

1
Identify the requirement for return traffic to be automatically permitted based on allowed inbound traffic.
This indicates a stateful security control.
Stateful firewalls automatically allow return traffic for any established connection without needing explicit rules in the opposite direction.
2
Evaluate the stateful nature of VPC security features.
Security groups are stateful, whereas Network ACLs are stateless.
Choosing security groups allows return traffic automatically, satisfying the SysOps Administrator's requirement.

Key Concept

Stateful vs Stateless VPC Security Controls
Rate this question

Topics

VPC Security Controls and Traffic Analysis

More questions from this topic