AWS - Security Groups and Network ACLs
You have a NACL configured to allow inbound HTTP traffic on port 80. To ensure clients receive responses, which additional rule must be configured?
You have a NACL configured to allow inbound HTTP traffic on port 80. To ensure clients receive responses, which additional rule must be configured?
hard📝 Application Q8 of 15
Step-by-Step Solution
Solution:
Step 1: Recognize stateless nature
NACLs do not track connection state, so return traffic must be explicitly allowed.Step 2: Identify return traffic ports
Return traffic from HTTP responses uses ephemeral ports (1024-65535) on the outbound direction.Step 3: Configure outbound rule
To allow return traffic, an outbound ALLOW rule for ephemeral ports is required.Final Answer:
An outbound ALLOW rule for ephemeral ports (1024-65535) to permit return traffic -> Option BQuick Check:
Return traffic uses ephemeral ports, so allow outbound ephemeral ports [OK]
Quick Trick: Allow outbound ephemeral ports for return traffic [OK]
Common Mistakes:
MISTAKES- Only allowing outbound port 80 and ignoring ephemeral ports
- Assuming inbound rules cover return traffic
- Not configuring outbound rules at all
Master "Security Groups and Network ACLs" in AWS
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore AWS Quizzes