Alibaba ACP-Cloud1 Exam - Topic 7 Question 22 Discussion

Question

Before data communication is setup, the security groups match the security group rules one by one to query whether to allow access requests Assume that the user has created two security group rules 1 and 2 The protocol type, port range, authorization type, and authorization object of the two security group rules are the same. The difference is that Rule 1 is a denial policy, rule 2 is an allowed policy, so the following statement is correct_______ (Number of correct answers 2)

Fatima · Accepted Answer

A) If rule 1 and rule 2 have the same priority, the rule of the denial policy takes effect first, and the rule of the allowed policy does not take effect and C) If rule 1 and rule 2 have different priorities, the rule with a small priority number takes effect

Fatima · Answer

B) If rule 1 and rule 2 have the same priority, the rule of the allowed policy takes effect first, and the rule that of the denial policy does not take effect.

Fatima · Answer

D) If rule 1 and rule 2 have different priorities, the rule with a large priority number takes effect.