A municipal library is hosting its public book catalog on an Amazon EC2 instance. The library's IT administrator is configuring a security group to secure this instance. Which two statements describe the behavior or characteristics of AWS security groups?
- They are stateful, meaning that return traffic for allowed inbound requests is automatically permitted.Cevap
- They deny all inbound traffic by default when a new security group is created, requiring explicit allow rules.Cevap
- CThey are stateless, meaning that you must configure a matching outbound rule to allow return traffic.
- DThey operate at the subnet level of a Virtual Private Cloud (VPC) to secure all resources within that subnet.
- EThey automatically scan the operating system of the EC2 instance for software vulnerabilities.
Cevap
The correct statements are that security groups are stateful, automatically allowing return traffic for allowed inbound requests, and that newly created security groups deny all inbound traffic by default.
Security groups are stateful firewalls that automatically allow outbound response traffic for any permitted inbound connection. When created, they deny all incoming connections by default until custom rules are added to allow traffic.
Adım Adım Çözüm
Anahtar Kavram
AWS security groups act as virtual firewalls at the instance level, operating statefully with default settings that deny all inbound traffic.