Bird
0
0

If a security group allows inbound SSH (port 22) from a specific IP, what happens when the instance responds to that SSH request?

medium📝 Predict Output Q13 of 15
AWS - Security Groups and Network ACLs
If a security group allows inbound SSH (port 22) from a specific IP, what happens when the instance responds to that SSH request?
AThe response is blocked unless an outbound rule allows port 22
BThe response is automatically allowed due to stateful behavior
CThe response is allowed only if a separate inbound rule exists
DThe response is blocked by default and requires a NAT gateway
Step-by-Step Solution
Solution:
  1. Step 1: Recall stateful nature of security groups

    Security groups track connections and allow return traffic automatically.
  2. Step 2: Apply to SSH inbound and response outbound

    Inbound SSH allowed means response outbound traffic is automatically allowed without extra rules.
  3. Final Answer:

    The response is automatically allowed due to stateful behavior -> Option B
  4. Quick Check:

    Inbound SSH allows automatic response outbound [OK]
Quick Trick: Inbound allows return traffic automatically [OK]
Common Mistakes:
MISTAKES
  • Thinking outbound rules must explicitly allow return traffic
  • Confusing inbound and outbound directions
  • Assuming NAT gateway is needed for return traffic

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More AWS Quizzes