Security Groups and NACLs Quiz

What you'll be asked

1. Which of the following best describes the fundamental difference between Security Groups and Network ACLs (NACLs)?
2. You have a web server in a public subnet that needs to accept incoming traffic on port 80. What is the minimum configuration required on the associated Security Group?
3. A Network ACL is configured to deny all traffic from a specific IP address (192.168.1.50) on port 22. If the associated Security Group allows all traffic from 0.0.0.0/0 on port 22, what happens when 192.168.1.50 attempts to SSH into the instance?
4. You are troubleshooting why an instance in a private subnet cannot download updates from an external repository via HTTP. You have confirmed the Security Group allows outbound traffic. What is the most likely cause related to NACLs?
5. An administrator wants to block a specific malicious IP address from accessing any resources in a VPC. Which mechanism is most efficient for this, and why?

Answers and explanations come after you submit.