AWS - Security Groups and Network ACLsIf you create a new security group without adding any inbound rules, what is the default inbound behavior?AAll inbound traffic is denied.BAll inbound traffic is allowed.CInbound traffic is allowed only from the same security group.DInbound traffic is allowed only on port 22.Check Answer
Step-by-Step SolutionSolution:Step 1: Understand default inbound rules for a new security groupNew security groups start with no inbound rules, so all inbound traffic is denied by default.Step 2: Match this with the optionsAll inbound traffic is denied. correctly states that all inbound traffic is denied.Final Answer:All inbound traffic is denied. -> Option AQuick Check:New SG inbound default = deny all [OK]Quick Trick: New security groups deny all inbound traffic by default [OK]Common Mistakes:MISTAKESAssuming new SGs allow inbound from self by defaultThinking inbound is open to all by defaultConfusing default SG with new custom SG behavior
Master "Security Groups and Network ACLs" in AWS9 interactive learning modes - each teaches the same concept differentlyLearnWhyDeepVisualTryChallengeProjectRecallTime
More AWS Quizzes AWS CLI - Basic CLI commands (s3, ec2) - Quiz 4medium AWS CLI - Installing AWS CLI - Quiz 2easy Cloud Computing Fundamentals - Edge locations and CloudFront overview - Quiz 11easy Identity and Access Management - IAM best practices - Quiz 14medium Identity and Access Management - Managed vs inline policies - Quiz 4medium Identity and Access Management - IAM users and groups - Quiz 9hard Security Groups and Network ACLs - Inbound and outbound rules - Quiz 15hard VPC Fundamentals - Public vs private subnets - Quiz 9hard VPC Fundamentals - Public vs private subnets - Quiz 1easy VPC Fundamentals - Default VPC overview - Quiz 15hard