Security Groups

Question 1

In a security group, what inbound traffic is allowed by default?

Answer 1

by default, all inbound traffic is blocked.

Question 2

In a security group, what outbound traffic is allowed by default?

Answer 2

All outbound traffic is allowed

Question 3

When you make a change to a security group, how long does it take for that change to take effect?

Answer 3

Changes to security groups take effect immediately

Question 4

What is the maximum number of EC2 instances that can be associated with a single security group?

Answer 4

Unlimited. You can have any number of EC2 instances within a security group.

Question 5

Can you have multiple security groups attached to an EC2 instance?

Answer 5

Yes

Question 6

What does it mean that security groups are stateful?

Answer 6

If you create an inbound rule allowing traffic in, that traffic is automatically allowed back out again

Question 7

Suppose you need to block a specific IP address from accessing your EC2 instance. How can this be accomplished using Security Groups?

Answer 7

You cannot block specific IP addresses using security groups, use network access control lists instead

Question 8

Can you specify deny rules in a security group?

Answer 8

NO

Question 9

Can two instances within a same security group talk to each other?

Answer 9

only if you configure the instances to allow each other’s traffic

Question 10

Can you specify Allow rules in a security group?

Answer 10

Yes