VPC Security Best Practices Quiz

What you'll be asked

1. Which component acts as a virtual firewall for your VPC to control inbound and outbound traffic at the subnet level?
2. You have a web server in a public subnet and a database in a private subnet. Which configuration is the most secure way to allow the web server to access the database?
3. What is the primary difference between Security Groups and Network ACLs regarding statefulness?
4. A developer needs to access instances in a private subnet for troubleshooting without exposing them to the internet. Which solution is most appropriate?
5. You are auditing a VPC and notice that a specific subnet has an associated Network ACL that explicitly denies all traffic from a specific IP range, yet the instances within that subnet are still receiving traffic from those IPs. What is the most likely cause?

Answers and explanations come after you submit.