Security Groups and NACLs Quiz

What you'll be asked

1. Which of the following best describes the fundamental difference between Security Groups and Network ACLs (NACLs) in AWS?
2. You have a web server in a private subnet that needs to communicate with a database in a different private subnet. Which configuration is required to allow this traffic?
3. An administrator notices that traffic is being blocked even though the Security Group rules appear to be correct. What is the most likely cause if the NACLs are set to default?
4. A developer is testing a new application and accidentally adds a 'Deny' rule to the Network ACL that blocks all traffic on port 80. If the existing Security Group has an 'Allow' rule for port 80, what will happen?
5. You are designing a high-security architecture. You need to block traffic from a specific malicious IP address (192.0.2.1) from reaching any instance in your VPC. Which tool is the most appropriate for this task?

Answers and explanations come after you submit.