Bird
0
0

You created a Network ACL rule to allow inbound HTTP traffic on port 80 but traffic is still blocked. What is the likely error?

medium📝 Debug Q6 of 15
AWS - Security Groups and Network ACLs
You created a Network ACL rule to allow inbound HTTP traffic on port 80 but traffic is still blocked. What is the likely error?
AThe rule number is higher than a deny rule that blocks the traffic.
BThe rule uses '--egress' instead of '--ingress'.
CThe CIDR block is set to a private IP range.
DThe Network ACL is attached to the wrong subnet.
Step-by-Step Solution
Solution:
  1. Step 1: Check rule direction

    Inbound traffic requires '--ingress' flag; using '--egress' applies to outbound.
  2. Step 2: Understand impact of wrong direction

    If rule is set for outbound but intended for inbound, traffic will be blocked inbound.
  3. Final Answer:

    The rule uses '--egress' instead of '--ingress'. -> Option B
  4. Quick Check:

    Inbound rules need '--ingress' flag [OK]
Quick Trick: Use '--ingress' for inbound rules, '--egress' for outbound [OK]
Common Mistakes:
MISTAKES
  • Mixing up ingress and egress flags
  • Ignoring subnet attachment
  • Assuming CIDR block always causes block

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More AWS Quizzes