Examkin

Soru

Zorluk: KolayVPC Network Security

A company wants to secure its web servers running on Amazon EC2 instances within a VPC. The security team requires that inbound traffic to the instances be restricted to port 443443 (HTTPS) from a specific office IP address. Additionally, the configuration must allow return traffic back to the office clients without requiring any explicit outbound rules. Which VPC feature should the solutions architect configure to implement this access control?

  1. Security groupsCevap
  2. B
    Network access control lists (Network ACLs)
  3. C
    AWS WAF web ACLs
  4. D
    AWS Shield Standard

Cevap

Security groups
Security groups are stateful. When an inbound rule allows traffic on port 443443 from a specific IP address, the security group automatically permits the corresponding outbound return traffic to the client, satisfying the requirement to avoid explicit outbound rules.

Adım Adım Çözüm

1
Analyze the requirement for stateful behavior where return traffic is allowed automatically.
Identify that a stateful firewall resource is required to handle the traffic without explicit outbound rules.
Security groups are stateful and allow return traffic automatically, whereas Network ACLs are stateless and require explicit rules in both directions.
2
Evaluate the options based on their placement in the VPC architecture.
Security groups operate at the instance level and support rules based on IP address and port.
This matches the requirement to restrict access to port 443443 from a specific office IP address at the EC2 instance layer.

Anahtar Kavram

VPC Security Groups are stateful firewalls that operate at the instance level.
Tahmini Süre:45s
Bu soruyu puanla

Konular

VPC Network Security

Bu konudan daha fazla soru