Which of the following descriptions about security groups is correct? (Multiple choice)

Question

Options

• ACreate a virtual machine, and a security group will be generated at the same time
• BA security group is a logical grouping
• CSecurity groups, similar to firewalls, are used to set network access control for single or multiple
• DThe object protected by the security group is the virtual machine

• A
  16% (9)
• B
  84% (49)

Explanation

B, C, and D are all accurate descriptions of security groups in cloud computing.

B is correct because a security group is fundamentally a logical grouping of network access control rules - it's not a physical device but an abstract policy construct that can be applied to multiple resources.

C is correct because security groups act as virtual firewalls, controlling inbound and outbound network traffic for one or more cloud resources based on rules you define (port, protocol, source/destination).

D is correct because the primary protected objects are virtual machines (or network interfaces attached to them) - security groups are bound to VMs to enforce what traffic reaches them.

A is wrong because a new security group is not automatically created when you create a VM. Instead, VMs are assigned to an already-existing security group (often a default one). Security groups are managed independently and can be shared across many VMs.

Memory tip: Think of a security group as a "named ruleset club" - VMs join the club rather than each getting their own. One club (security group) can protect many members (VMs), and you create the club before the members join it.

No community discussion yet for this question.