Cloud network security groups in Cybersecurity - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding the primary function of security groups

What is the main purpose of a cloud network security group?

A To manage cloud resource billing and cost allocation

B To store data backups securely in the cloud

C To monitor user activity logs for compliance

D To control inbound and outbound traffic to cloud resources based on rules

💡 Hint

Think about how cloud resources are protected from unwanted network access.

Security groups act like virtual firewalls that control what network traffic can reach or leave cloud resources by applying rules.

📋 Factual

intermediate

Default behavior of security groups

What is the default behavior of a newly created cloud security group regarding inbound traffic?

A All inbound traffic is denied by default

B All inbound traffic is allowed by default

C Inbound traffic is allowed only from the same security group

D Inbound traffic is allowed only from trusted IP addresses

💡 Hint

Consider the principle of least privilege in security.

By default, security groups deny all inbound traffic to protect resources until explicit rules allow specific traffic.

🔍 Analysis

advanced

Effect of overlapping security group rules

If a cloud resource is associated with two security groups where one allows inbound HTTP (port 80) from any IP and the other denies all inbound traffic, what will be the effective inbound HTTP access?

A Inbound HTTP traffic will be allowed only from specific IPs

B Inbound HTTP traffic will be denied due to the deny rule

C Inbound HTTP traffic will be allowed from any IP

D Inbound HTTP traffic will be blocked unless explicitly allowed in both groups

💡 Hint

Remember how security groups handle allow and deny rules.

Security groups typically use an implicit deny for traffic not allowed. However, they do not have explicit deny rules; if any associated group allows traffic, it is permitted.

❓ Comparison

advanced

Difference between security groups and network ACLs

Which statement correctly distinguishes cloud security groups from network ACLs (Access Control Lists)?

A Both security groups and network ACLs are stateful and operate at the instance level

B Security groups operate at the instance level and are stateful; network ACLs operate at the subnet level and are stateless

C Security groups operate at the subnet level and are stateless; network ACLs operate at the instance level and are stateful

D Both security groups and network ACLs are stateless and operate at the subnet level

💡 Hint

Think about where each applies and how they track connections.

Security groups are stateful and control traffic at the instance level, remembering allowed connections. Network ACLs are stateless, apply to subnets, and require explicit rules for both inbound and outbound traffic.

❓ Reasoning

expert

Diagnosing connectivity issues with security groups

A user reports that their cloud virtual machine cannot receive SSH connections (port 22) from their office IP, even though a security group rule allows inbound SSH from that IP. Which is the most likely cause?

A The network ACL associated with the subnet blocks inbound SSH traffic

B The security group rule is set to allow outbound SSH instead of inbound

C The virtual machine's firewall is blocking SSH connections

D The security group is missing an outbound rule allowing return traffic

💡 Hint

Consider other network controls besides security groups that affect traffic.

Even if the security group allows inbound SSH, a network ACL blocking inbound port 22 traffic at the subnet level will prevent connections. Network ACLs are stateless and require explicit allow rules.