Examkin

Soru

Zorluk: OrtaNetwork and Infrastructure Security

A SaaS company is hosting a collaborative document editing application on Amazon EC2 instances. The system administrator wants to allow incoming HTTP/HTTPS traffic to the EC2 instances, ensuring that any corresponding outbound response traffic is automatically permitted regardless of outbound rules. Which AWS network security feature should be configured to meet this requirement?

  1. Security groupsCevap
  2. B
    Network Access Control Lists (Network ACLs)
  3. C
    Amazon GuardDuty
  4. D
    AWS Shield Standard

Cevap

Security groups
Security groups are stateful firewalls that operate at the instance level. When you allow inbound traffic to an instance, the return traffic is automatically allowed regardless of any outbound security group rules.

Adım Adım Çözüm

1
Analyze the requirements for instance-level traffic filtering and stateful behavior.
The requirement specifies allowing inbound traffic to EC2 instances and automatically permitting the return outbound traffic without explicit configuration.
This matches the definition of stateful packet filtering.
2
Compare the firewalls available in an Amazon VPC.
Security groups are stateful and operate at the instance level. Network ACLs are stateless and operate at the subnet level.
Only security groups track connection state and automatically allow return traffic.

Anahtar Kavram

Security groups act as stateful firewalls for Amazon EC2 instances, automatically allowing return traffic for any permitted inbound connection.
Bu soruyu puanla

Konular

Network and Infrastructure Security

Bu konudan daha fazla soru