Bird
0
0

If a security group has an inbound rule allowing TCP port 3306 from 192.168.1.0/24 and no outbound rules, what will happen when an application tries to connect to a MySQL database on port 3306?

medium📝 service behavior Q5 of 15
AWS - Security Groups and Network ACLs
If a security group has an inbound rule allowing TCP port 3306 from 192.168.1.0/24 and no outbound rules, what will happen when an application tries to connect to a MySQL database on port 3306?
AConnection will fail because port 3306 is blocked by AWS
BConnection will fail because outbound traffic is denied by default
CConnection will succeed because inbound rule allows it
DConnection will succeed only if outbound rule allows port 3306
Step-by-Step Solution
Solution:
  1. Step 1: Understand default outbound behavior

    By default, security groups allow all outbound traffic unless restricted.
  2. Step 2: Analyze effect of no outbound rules

    If no outbound rules exist, AWS allows all outbound traffic by default.
  3. Final Answer:

    Connection will succeed because inbound rule allows it -> Option C
  4. Quick Check:

    No outbound rules = allow outbound by default [OK]
Quick Trick: No outbound rules means outbound allowed by default [OK]
Common Mistakes:
MISTAKES
  • Assuming outbound is denied by default
  • Ignoring outbound rules impact
  • Thinking inbound alone controls connection

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More AWS Quizzes