Security Groups vs Network ACLs Quiz

Quiz covering VPC Security Design

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

1. 1

   Which of the following is a primary difference between Security Groups and Network ACLs in AWS?

2. 2

   You have a web server in a public subnet that needs to accept incoming HTTP traffic from the internet. Which rule configuration is required for the Security Group?

3. 3

   Your security team requires you to block a specific malicious IP address from accessing any resources within an entire subnet. Which tool should you use?

4. 4

   If a Network ACL has a rule to allow inbound traffic on port 443, but the corresponding Security Group does not have an inbound rule for port 443, what happens to the traffic?

5. 5

   An administrator needs to allow traffic from a database in Subnet A to an application server in Subnet B. The Network ACL for Subnet B has an inbound rule allowing port 3306, but the outbound rule for the database's subnet (Subnet A) is set to 'deny all'. Will the connection succeed?