Cloud+ V3 Security Groups and Network ACLs

Submit

2. What is the recommended practice when modifying security group rules in production?

Test changes in non-production first, then apply carefully

Apply changes immediately to minimize latency

Modify all instances simultaneously for consistency

Disable monitoring during rule changes

3. Network ACLs provide which of the following capabilities? (Select all that apply)

Ordered rule processing

Explicit deny rules

Stateful traffic tracking

Subnet-level traffic control

Submit

5. Which security group feature allows you to reference another security group in a rule?

Source/destination security group ID

Group aliasing

Cross-group linking

Security group inheritance

6. Security groups and Network ACLs work together as defense-in-depth. True or False?

True

False

7. A Network ACL can explicitly deny traffic using rule number 100 and then allow it with rule 200. What happens to matching traffic?

The traffic is denied (rule 100 is processed first)

The traffic is allowed (later rules override earlier ones)

The traffic is dropped without response

The system requires manual intervention

8. What happens when conflicting rules exist in a Network ACL?

The rule with the lowest number takes precedence

All rules are applied simultaneously

The system prompts for manual resolution

The rule with the highest number takes precedence

9. Which statement about outbound rules in security groups is correct?

Outbound traffic is allowed by default unless explicitly denied

Outbound rules must match inbound rules

Outbound traffic cannot be restricted in security groups

Outbound rules only apply to port 443

10. Can a single instance belong to multiple security groups simultaneously?

True

False

11. What is the primary function of a security group in cloud infrastructure?

Control inbound and outbound traffic at the instance level

Encrypt data in transit between instances

Monitor user login attempts

Manage cloud storage permissions

12. A security group rule that allows traffic from 0.0.0.0/0 on port 22 represents what security concern?

Overly permissive access to SSH from anywhere

Proper implementation of least privilege

Encrypted communication channel

Protection against DDoS attacks

13. Which transport layer protocols can be controlled by security groups? (Select all that apply)

TCP

UDP

ICMP

HTTP

Submit

14. What is the difference between Allow and Deny rules in Network ACLs?

Allow permits traffic; Deny blocks traffic

They are interchangeable

Allow rules apply only to inbound traffic

Deny rules are processed before Allow rules

Submit

16. Which of the following best represents the principle of least privilege in cloud security?

Grant only the minimum permissions needed for a task

Allow all traffic and restrict later if needed

Use the same security group for all instances

Disable all security controls during development

17. Security groups are stateful, meaning they automatically allow return traffic. True or False?

True

False

Submit

19. What is the default action for inbound traffic in a newly created security group?

Allow all traffic

Deny all traffic

Allow only HTTPS traffic

Allow traffic from the same security group

20. Which statement best describes Network ACLs (NACLs)?

They operate at the subnet level and use ordered rules

They encrypt all traffic passing through the subnet

They replace security groups in modern cloud systems

They only control inbound traffic

Cloud+ V3 Security Groups and Network ACLs Quiz

1. Network ACLs operate at the ____ layer of the OSI model.

2.

What first name or nickname would you like us to use?

2. What is the recommended practice when modifying security group rules in production?

3. Network ACLs provide which of the following capabilities? (Select all that apply)

4. To restrict database access to only application servers, you should reference the application server's ____ in the database security group rule.

5. Which security group feature allows you to reference another security group in a rule?

6. Security groups and Network ACLs work together as defense-in-depth. True or False?

7. A Network ACL can explicitly deny traffic using rule number 100 and then allow it with rule 200. What happens to matching traffic?

8. What happens when conflicting rules exist in a Network ACL?

9. Which statement about outbound rules in security groups is correct?

10. Can a single instance belong to multiple security groups simultaneously?

11. What is the primary function of a security group in cloud infrastructure?

12. A security group rule that allows traffic from 0.0.0.0/0 on port 22 represents what security concern?

13. Which transport layer protocols can be controlled by security groups? (Select all that apply)

14. What is the difference between Allow and Deny rules in Network ACLs?

15. Network ACLs are ____ in nature, unlike security groups which are stateful.

16. Which of the following best represents the principle of least privilege in cloud security?

17. Security groups are stateful, meaning they automatically allow return traffic. True or False?

18. In Network ACLs, rules are processed in order by their ____ number.

19. What is the default action for inbound traffic in a newly created security group?

20. Which statement best describes Network ACLs (NACLs)?