Examkin

Soru

Zorluk: KolayVPC Security Controls and Traffic Analysis

A SysOps Administrator is setting up an application on an Amazon EC2 instance in a custom VPC. To allow inbound SSH traffic from the administrator's IP address, the administrator adds an inbound rule to the security control. The administrator wants to ensure that the return outbound traffic from the instance back to the administrator's IP address is automatically permitted without having to define any additional outbound rules. Which security control should the administrator use to meet this requirement?

  1. Security GroupsCevap
  2. B
    Network Access Control Lists (NACLs)
  3. C
    VPC Route Tables
  4. D
    Internet Gateways

Cevap

Security Groups
Security Groups are stateful security controls that operate at the instance level. When an inbound rule is added to allow SSH traffic, the Security Group automatically allows the return outbound traffic back to the client, regardless of any outbound rules configured in the Security Group.

Adım Adım Çözüm

1
Identify the requirement for return traffic to be automatically permitted based on allowed inbound traffic.
This indicates a stateful security control.
Stateful firewalls automatically allow return traffic for any established connection without needing explicit rules in the opposite direction.
2
Evaluate the stateful nature of VPC security features.
Security groups are stateful, whereas Network ACLs are stateless.
Choosing security groups allows return traffic automatically, satisfying the SysOps Administrator's requirement.

Anahtar Kavram

Stateful vs Stateless VPC Security Controls
Bu soruyu puanla

Konular

VPC Security Controls and Traffic Analysis

Bu konudan daha fazla soru