AWS - Security Groups and Network ACLs
Given a NACL with inbound rule allowing TCP port 443 and no outbound rules, what happens to HTTPS response traffic?
Given a NACL with inbound rule allowing TCP port 443 and no outbound rules, what happens to HTTPS response traffic?
medium📝 Predict Output Q4 of 15
Step-by-Step Solution
Solution:
Step 1: Analyze inbound rule
Inbound TCP port 443 is allowed, so incoming HTTPS requests pass through.Step 2: Check outbound rules for response
No outbound rules exist, so response traffic is blocked by default due to statelessness.Final Answer:
Response traffic is blocked because no outbound rule allows it. -> Option AQuick Check:
No outbound rule = response blocked [OK]
Quick Trick: No outbound rule means no return traffic allowed [OK]
Common Mistakes:
MISTAKES- Assuming return traffic auto-allowed
- Confusing security group rules with NACL rules
- Ignoring stateless nature of NACLs
Master "Security Groups and Network ACLs" in AWS
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore AWS Quizzes