[Solved] Consider a Network ACL with these inbound rules:Rule 100: Allow TCP port 22 from 0.0.0.0/0Rule 110: Deny all other inbound trafficWhat will happen if an SSH connection is attempted from IP 5.6.7.8? | AWS

AWS - Security Groups and Network ACLs

Consider a Network ACL with these inbound rules:
Rule 100: Allow TCP port 22 from 0.0.0.0/0
Rule 110: Deny all other inbound traffic
What will happen if an SSH connection is attempted from IP 5.6.7.8?

AThe connection will be allowed only if the outbound rule permits it

BThe connection will be denied because the deny rule overrides the allow rule

CThe connection will be allowed because port 22 is explicitly permitted

DThe connection will be denied because Network ACLs are stateful

Step-by-Step Solution

Solution:

Step 1: Analyze inbound rules
Rule 100 explicitly allows inbound TCP traffic on port 22 from any IP.
Step 2: Understand rule evaluation
Network ACLs evaluate rules by rule number in ascending order; the first matching rule applies.
Step 3: Consider deny all rule
Rule 110 denies all other traffic but does not override the earlier allow rule for port 22.
Step 4: Confirm statefulness
Network ACLs are stateless, so outbound rules must also allow return traffic, but question focuses on inbound attempt.
Final Answer:
The connection will be allowed because port 22 is explicitly permitted -> Option C
Quick Check:
Allow rules take precedence if matched first [OK]

Quick Trick: First matching rule applies; allow on port 22 permits SSH [OK]

Common Mistakes:

Assuming deny rules override earlier allow rules
Confusing Network ACLs as stateful
Ignoring rule evaluation order

Master "Security Groups and Network ACLs" in AWS

9 interactive learning modes - each teaches the same concept differently

Learn Why Deep Visual Try Challenge Project Recall Time

More AWS Quizzes

Consider a Network ACL with these inbound rules:

Step 1: Analyze inbound rules

Step 2: Understand rule evaluation

Step 3: Consider deny all rule

Step 4: Confirm statefulness

Final Answer:

Quick Check:

Want More Practice?