Inbound and outbound rules in AWS - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to allow inbound HTTP traffic on port 80.

AWS

SecurityGroupIngress:
  - IpProtocol: "tcp"
    FromPort: [1]
    ToPort: 80
    CidrIp: "0.0.0.0/0"

Drag options to blanks, or click blank then click option'

A80

B8080

C22

D443

Attempts:

3 left

💡 Hint

Common Mistakes

Using port 22 which is for SSH instead of HTTP.

Using port 443 which is for HTTPS.

Port 80 is the standard port for HTTP traffic, so it must be set as the FromPort to allow inbound HTTP.

2fill in blank

medium

Complete the code to allow outbound traffic to any IP on all ports.

AWS

SecurityGroupEgress:
  - IpProtocol: "-1"
    FromPort: 0
    ToPort: [1]
    CidrIp: "0.0.0.0/0"

Drag options to blanks, or click blank then click option'

A443

B22

C80

D65535

Attempts:

3 left

💡 Hint

Common Mistakes

Setting ToPort to 80 or 443 limits outbound traffic to only those ports.

Using port 22 which is for SSH and not all ports.

Port 65535 is the highest port number, so setting ToPort to 65535 allows all ports outbound.

3fill in blank

hard

Fix the error in the inbound rule to allow HTTPS traffic on port 443.

AWS

SecurityGroupIngress:
  - IpProtocol: "tcp"
    FromPort: [1]
    ToPort: [2]
    CidrIp: "0.0.0.0/0"

Drag options to blanks, or click blank then click option'

A22

B443

C8080

D80

Attempts:

3 left

💡 Hint

Common Mistakes

Leaving ToPort as 80 which is for HTTP.

Using port 22 which is for SSH.

HTTPS traffic uses port 443, so both FromPort and ToPort must be set to 443 to allow HTTPS inbound.

4fill in blank

hard

Fill both blanks to allow inbound SSH traffic only from a specific IP range.

AWS

SecurityGroupIngress:
  - IpProtocol: [1]
    FromPort: [2]
    ToPort: 22
    CidrIp: "203.0.113.0/24"

Drag options to blanks, or click blank then click option'

A"tcp"

B"udp"

C22

D80

Attempts:

3 left

💡 Hint

Common Mistakes

Using UDP protocol instead of TCP.

Setting FromPort to 80 which is for HTTP.

SSH uses TCP protocol on port 22, so IpProtocol must be "tcp" and FromPort must be 22.

5fill in blank

hard

Fill all three blanks to create an outbound rule allowing DNS queries over UDP port 53.

AWS

SecurityGroupEgress:
  - IpProtocol: [1]
    FromPort: [2]
    ToPort: [3]
    CidrIp: "0.0.0.0/0"

Drag options to blanks, or click blank then click option'

A"tcp"

B"udp"

C53

D22

Attempts:

3 left

💡 Hint

Common Mistakes

Using TCP protocol instead of UDP.

Setting ports to 22 which is for SSH.

DNS queries typically use UDP protocol on port 53, so IpProtocol is "udp" and both FromPort and ToPort are 53.