Security Groups Flashcards
1
Q
How quickly to changes to security groups take effect?
A
Immediately
2
Q
Are security groups stateful?
A
yes
3
Q
Describe stateful rules
A
when you add an inbound rule it automatically allows traffic back out
You can delete the “allow all outbound” rule and traffic still leaves if it was allowed in
4
Q
NACL’s
A
stateless
5
Q
stateless
A
Require explicit inbound and outbound rules
6
Q
Can you deny traffic with a Security Group?
A
No
You can only specify allow rules
7
Q
Can you block an IP address with a Security Group?
A
No
Use NACL’s for blocking IP’s
8
Q
Can you add multiple security groups to an instance?
A
yes
9
Q
Default state of inbound traffic in a security group
A
all blocked
10
Q
Default state of outbound traffic in a security group
A
all allowed
11
Q
How many EC2 instances per security group
A
unlimited
