AWS - Advanced Security
An AWS Config rule evaluates whether security groups allow unrestricted inbound SSH access. If a security group allows SSH from 0.0.0.0/0, what compliance status will AWS Config assign?
An AWS Config rule evaluates whether security groups allow unrestricted inbound SSH access. If a security group allows SSH from 0.0.0.0/0, what compliance status will AWS Config assign?
medium📝 service behavior Q5 of 15
Step-by-Step Solution
Solution:
Step 1: Understand the rule's purpose
The rule flags security groups that allow SSH from anywhere (0.0.0.0/0) as risky and NON_COMPLIANT.Step 2: Determine compliance status
Since the security group allows unrestricted SSH, AWS Config marks it NON_COMPLIANT.Final Answer:
NON_COMPLIANT -> Option BQuick Check:
Unrestricted SSH = NON_COMPLIANT [OK]
Quick Trick: Open SSH ports cause NON_COMPLIANT status [OK]
Common Mistakes:
- Assuming open SSH is COMPLIANT
- Confusing NOT_APPLICABLE with NON_COMPLIANT
- Ignoring IP range in rule evaluation
Master "Advanced Security" in AWS
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore AWS Quizzes