Cloud network security groups in Cybersecurity - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a cloud network security group?

A cloud network security group is a set of rules that controls the incoming and outgoing network traffic to and from cloud resources, like virtual machines, to protect them from unauthorized access.

intermediate

How do security groups differ from traditional firewalls?

Security groups are virtual and apply rules at the cloud resource level, often stateful, meaning they remember allowed connections. Traditional firewalls are physical or software devices that filter traffic at network boundaries.

beginner

What does it mean when a security group rule is 'stateful'?

A stateful rule means that if incoming traffic is allowed, the response traffic is automatically allowed back out, without needing a separate rule.

beginner

Why is it important to restrict security group rules to specific IP addresses or ports?

Restricting rules limits access only to trusted sources and necessary services, reducing the risk of unauthorized access and attacks.

beginner

Can security groups be applied to multiple cloud resources at once?

Yes, security groups can be attached to multiple resources, allowing consistent security rules across those resources.

What is the primary purpose of a cloud network security group?

A To store data securely in the cloud

B To monitor user activity in the cloud

C To control network traffic to and from cloud resources

D To manage cloud billing and costs

Security groups control network traffic by allowing or blocking connections to cloud resources.

Which of the following best describes a 'stateful' security group rule?

A It blocks all incoming traffic

B It requires manual approval for each connection

C It only applies to outgoing traffic

D It remembers allowed connections and permits response traffic automatically

Stateful rules track connections and allow return traffic without extra rules.

Why should security group rules be limited to specific ports?

A To improve network speed

B To reduce unauthorized access risks

C To increase cloud storage capacity

D To allow all traffic by default

Limiting ports reduces the attack surface by only allowing necessary services.

Can a single security group be used for multiple cloud resources?

A Yes, it can be attached to many resources

B No, it can only be used for one resource

C Only if resources are in different regions

D Only for resources of the same type

Security groups are reusable and can be applied to multiple resources for consistent rules.

What happens if no security group rules allow traffic to a cloud resource?

A All traffic is blocked by default

B Traffic is randomly allowed or blocked

C Only outgoing traffic is allowed

D All traffic is allowed by default

By default, security groups block all traffic unless explicitly allowed.

Explain what a cloud network security group is and why it is important for protecting cloud resources.

Think about how rules help control who can connect to your cloud machines.

Describe the difference between stateful and stateless security group rules and give an example of why stateful rules are useful.

Consider how a web server sends data back after receiving a request.