Examkin

Soru

Zorluk: OrtaNetwork and Infrastructure Security

A media company is hosting a public-facing live video streaming ingest service on Amazon EC2 instances. The administrator needs to permit incoming traffic on port 1935 (RTMP) and ensure that outbound response traffic is automatically permitted back to the client without configuring any outbound rules. Which AWS security resource should be configured to meet this requirement?

  1. A
    Network Access Control Lists (NACLs)
  2. B
    Amazon GuardDuty
  3. Security groupsCevap
  4. D
    AWS Shield Standard

Cevap

Security groups
Security groups are stateful firewalls that operate at the instance level. When an inbound rule is created to allow traffic, the return outbound traffic is automatically allowed, making it the correct choice for this scenario.

Adım Adım Çözüm

1
Analyze the traffic requirement
The requirement is to allow inbound traffic on a specific port (1935) and automatically allow the return/outbound traffic without manually writing outbound rules.
This behavior indicates a stateful firewall resource that operates at the instance level.
2
Evaluate the stateful vs. stateless nature of AWS firewalls
Security groups are stateful and automatically permit return traffic, while Network ACLs are stateless and require explicit return rules.
Choosing security groups satisfies the requirement of automatically permitting outbound response traffic.

Anahtar Kavram

Stateful filtering with Security Groups
Tahmini Süre:1m 0s
Bu soruyu puanla

Konular

Network and Infrastructure Security

Bu konudan daha fazla soru