Security Groups Flashcards

https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html

1
Q

What does SG stand for?

A

Security Group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

In a security group, what inbound traffic is allowed by default?

A

by default, all inbound traffic is blocked.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

In a security group, what outbound traffic is allowed by default?

A

All outbound traffic is allowed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

When you make a change to a security group, how long does it take for that change to take effect?

A

Changes to security groups take effect immediately

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the maximum number of EC2 instances that can be associated with a single security group?

A

Unlimited. You can have any number of EC2 instances within a security group.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Can you have multiple security groups attached to an EC2 instance?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What does it mean that security groups are stateful?

A

If you create an inbound rule allowing traffic in, that traffic is automatically allowed back out again

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Suppose you need to block a specific IP address from accessing your EC2 instance. How can this be accomplished using Security Groups?

A

You cannot block specific IP addresses using security groups

(Use network access control lists instead)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Can you specify Allow rules in a security group?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Can you specify deny rules in a security group?

A

NO

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Can your Security Group allow traffic from EC2 instances based on what Security Group the requesting instance has?

A

YES

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Suppose you are trying to connect to an EC2 Instance. The request is timing out but you are not explicitly getting a “connection refused” error. What is a likely explanation?

A

You may need to check if your Security Group is allowing the incoming traffic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly