Examkin

Soru

Zorluk: KolayNetwork and Infrastructure Security

A developer deploys a web application on an Amazon EC2 instance and updates its security group to permit inbound traffic on port 80. Although no outbound rules are modified, the instance can successfully return response traffic to the clients. Which characteristic of security groups explains why this outbound traffic is allowed?

  1. Security groups are stateful, meaning allowed inbound traffic is automatically permitted to flow outbound.Cevap
  2. B
    Network Access Control Lists (Network ACLs) are stateless, which automatically permits all outbound response traffic at the instance level.
  3. C
    Amazon GuardDuty automatically detects safe inbound connections and dynamically bypasses the outbound rule evaluation.
  4. D
    AWS manages operating system firewalls to allow return traffic under the AWS shared responsibility model.

Cevap

Security groups are stateful, meaning allowed inbound traffic is automatically permitted to flow outbound.
Security groups are stateful, which means that any rule permitting inbound traffic automatically permits the corresponding outbound response traffic, regardless of the outbound rules configured.

Adım Adım Çözüm

1
Analyze the resource and rules configuration.
The application runs on an Amazon EC2 instance with an inbound security group rule allowing port 80 traffic.
This establishes that inbound traffic is authorized.
2
Determine the stateful nature of the security firewall.
Since security groups operate at the instance level and are stateful, allowing inbound traffic automatically permits the corresponding outbound response traffic.
Stateful firewalls track the connection state and allow return traffic without requiring matching outbound rules.

Anahtar Kavram

Security groups are stateful firewalls that control inbound and outbound traffic at the Amazon EC2 instance level, automatically allowing return traffic.
Bu soruyu puanla

Konular

Network and Infrastructure Security

Bu konudan daha fazla soru