Security Groups NACLs Quiz

Quiz covering Secure Workloads

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

1. 1

   Which of the following best describes the fundamental difference between Security Groups and Network ACLs (NACLs) in a cloud environment?

2. 2

   You have a web server in a private subnet. You need to allow inbound HTTP traffic on port 80 from the internet. Which configuration is required for the Security Group?

3. 3

   A Network ACL (NACL) is configured with a rule to deny traffic on port 22. If a Security Group associated with an instance in that subnet explicitly allows port 22, what is the result?

4. 4

   When configuring a NACL to allow return traffic for a request originating from an instance in your subnet to an external server on port 443, what must you consider?

5. 5

   An architect is troubleshooting connectivity to a database. The Security Group allows traffic, but the NACL has multiple rules. If rule 100 is 'Allow TCP 3306' and rule 110 is 'Deny TCP 3306', what is the effective result for traffic on port 3306?