NSE7_PBC-7.2 · Question #59
You must allow an SSH traffic rule in an Amazon Web Services (AWS) network access list (NACL) to allow SSH traffic to travel to a subnet for temporary testing purposes. When you review the current…
The correct answer is B. You must create a new allow SSH rule above rule number 5. Network ACLs are stateless, and they evaluate each packet separately based on the rules that you define. The rules are processed in order, starting with the lowest numbered rule. If the traffic matches a rule, the rule is applied and no further rules are evaluated. Therefore…
Question
You must allow an SSH traffic rule in an Amazon Web Services (AWS) network access list (NACL) to allow SSH traffic to travel to a subnet for temporary testing purposes. When you review the current inbound network ACL rules, you notice that rule number 5 demes SSH and telnet traffic to the subnet What can you do to allow SSH traffic?
Options
- AYou must create a new allow SSH rule below rule number 5.
- BYou must create a new allow SSH rule above rule number 5.
- CYou must create a new allow SSH rule anywhere in the network ACL rule base to allow SSH
- DYou do not have to create any NACL rules because the default security group rule
How the community answered
(42 responses)- A2% (1)
- B81% (34)
- C7% (3)
- D10% (4)
Explanation
Network ACLs are stateless, and they evaluate each packet separately based on the rules that you define. The rules are processed in order, starting with the lowest numbered rule. If the traffic matches a rule, the rule is applied and no further rules are evaluated. Therefore, if you want to allow SSH traffic to a subnet, you must create a new allow SSH rule above rule number 5, which denies SSH and telnet traffic. Otherwise, the deny rule will take precedence and block the SSH
Topics
Community Discussion
No community discussion yet for this question.