Security Groups vs Network ACLs Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering VPC Security Design

What you'll be asked

  1. Which of the following is a primary difference between Security Groups and Network ACLs in AWS?
  2. You have a web server in a public subnet that needs to accept incoming HTTP traffic from the internet. Which rule configuration is required for the Security Group?
  3. Your security team requires you to block a specific malicious IP address from accessing any resources within an entire subnet. Which tool should you use?
  4. If a Network ACL has a rule to allow inbound traffic on port 443, but the corresponding Security Group does not have an inbound rule for port 443, what happens to the traffic?
  5. An administrator needs to allow traffic from a database in Subnet A to an application server in Subnet B. The Network ACL for Subnet B has an inbound rule allowing port 3306, but the outbound rule for the database's subnet (Subnet A) is set to 'deny all'. Will the connection succeed?

Answers and explanations come after you submit.