SAP-C02 · Question #63
A company has an Amazon VPC that is divided into a public subnet and a private subnet. A web application runs in Amazon VPC, and each subnet has its own NACL. The public subnet has a CIDR of 10.0.0.0/
The correct answer is B. An inbound rule for port 80 from source 10.0.0.0/24. E. An outbound rule for ports 1024 through 65535 to destination 10.0.0.0/24.. Ephemeral ports are not covered in the syllabus so be careful that you don't confuse day to day best practise with what is required for the exam. https://acloud.guru/forums/aws-certified-solutions-architect-associate/discussion/- KUbcwo4lXefMl7janaK/network-acls-ephemeral-ports
Question
A company has an Amazon VPC that is divided into a public subnet and a private subnet. A web application runs in Amazon VPC, and each subnet has its own NACL. The public subnet has a CIDR of 10.0.0.0/24. An Application Load Balancer is deployed to the public subnet. The private subnet has a CIDR of 10.0.1.0/24. Amazon EC2 instances that run a web server on port 80 are launched into the private subnet. Only network traffic that is required for the Application Load Balancer to access the web application can be allowed to travel between the public and private subnets. What collection of rules should be written to ensure that the private subnet's NACL meets the requirement? (Choose two.)
Options
- AAn inbound rule for port 80 from source 0.0.0.0/0.
- BAn inbound rule for port 80 from source 10.0.0.0/24.
- CAn outbound rule for port 80 to destination 0.0.0.0/0.
- DAn outbound rule for port 80 to destination 10.0.0.0/24.
- EAn outbound rule for ports 1024 through 65535 to destination 10.0.0.0/24.
How the community answered
(24 responses)- A4% (1)
- B79% (19)
- C4% (1)
- D13% (3)
Explanation
Ephemeral ports are not covered in the syllabus so be careful that you don't confuse day to day best practise with what is required for the exam. https://acloud.guru/forums/aws-certified-solutions-architect-associate/discussion/- KUbcwo4lXefMl7janaK/network-acls-ephemeral-ports
Community Discussion
No community discussion yet for this question.