AWS - Security Groups and Network ACLs
A user configures a NACL with inbound ALLOW for TCP port 8080 but forgets to add outbound ALLOW for ephemeral ports. What issue arises?
A user configures a NACL with inbound ALLOW for TCP port 8080 but forgets to add outbound ALLOW for ephemeral ports. What issue arises?
medium📝 Debug Q7 of 15
Step-by-Step Solution
Solution:
Step 1: Understand inbound rule effect
Inbound ALLOW on port 8080 lets requests reach the instance.Step 2: Recognize missing outbound ephemeral port rule
Responses use ephemeral ports outbound; missing ALLOW blocks them.Final Answer:
Inbound requests succeed but responses are blocked, causing connection failure. -> Option CQuick Check:
Missing outbound ephemeral port ALLOW = response blocked [OK]
Quick Trick: Allow ephemeral ports outbound for response traffic [OK]
Common Mistakes:
- Assuming inbound ALLOW covers responses
- Ignoring ephemeral port usage
- Believing outbound is allowed by default
Master "Security Groups and Network ACLs" in AWS
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore AWS Quizzes