SCS-C02 · Question #348
A company needs to use HTTPS when connecting to its web applications to meet compliance requirements. These web applications run in Amazon VPC on Amazon EC2 instances behind an Application Load…
The correct answer is D. Create a security group with a single inbound rule that allows connections from 0.0.0.0/0 on port. By configuring the security group to allow only inbound connections on port 443, and ensuring this is the only security group attached to the ALB, you ensure that only HTTPS traffic is allowed. This setup enforces compliance requirements for using only HTTPS and prevents…
Question
A company needs to use HTTPS when connecting to its web applications to meet compliance requirements. These web applications run in Amazon VPC on Amazon EC2 instances behind an Application Load Balancer (ALB). A security engineer wants to ensure that the load balancer will only accept connections over port 443, even if the ALB is mistakenly configured with an HTTP listener. Which configuration steps should the security engineer take to accomplish this task?
Options
- ACreate a security group with a rule that denies Inbound connections from 0.0.0.0/0 on port 00
- BCreate a network ACL that denies inbound connections from 0.0.0.0/0 on port 80
- CCreate a network ACL that allows outbound connections to the VPC IP range on port 443 only.
- DCreate a security group with a single inbound rule that allows connections from 0.0.0.0/0 on port
How the community answered
(42 responses)- A7% (3)
- B2% (1)
- C5% (2)
- D86% (36)
Explanation
By configuring the security group to allow only inbound connections on port 443, and ensuring this is the only security group attached to the ALB, you ensure that only HTTPS traffic is allowed. This setup enforces compliance requirements for using only HTTPS and prevents accidental allowance of HTTP traffic.
Topics
Community Discussion
No community discussion yet for this question.