MENU
AWS Security Group, Azure Network Security Group, GCP Firewall Service, by default support FQDN based firewall rules (e.g. www.yahoo.com) as a destination in their configuration, to allow/block traffic to the specified domain.
GCP Firewall Service, others not AWS Security Group does, others not
Suggested Answer: A
Get Premium ACE Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
FQDN -- Fully Qualified Domain Name.
Azure Firewall Applicaon Rule: Configure fully qualified domain names (FQDNs) that can be accessed from a subnet. In Azure, You can limit outbound HTTP/S traffic to a specified list of fully qualified domain names (FQDN) including wild cards.
AWS - You can use a third-party solution to implement highly available, secure FQDN Egress Filtering
service.
11 comments · newest first
LE
Lenita
11 months ago
Sounds a bit confusing, I need to double-check that info!
BR
Brock
11 months ago
Azure also doesn't support FQDN by default, just like AWS.
CH
Charolette
12 months ago
Wait, are you sure about AWS? I thought they had some FQDN options.
DO
Dottie
12 months ago
Totally agree, AWS is more restrictive with that.
WE
Weldon
12 months ago
GCP Firewall Service supports FQDN rules, but AWS Security Groups don't.
PA
Paola
1 year ago
I’m pretty sure GCP is the only one that explicitly supports FQDN in its firewall rules, but I could be wrong about Azure.
PA
Paris
1 year ago
I feel like the statement is misleading; I thought AWS Security Groups didn't support FQDN by default.
RE
Renea
1 year ago
I think I saw a practice question that mentioned Azure supports FQDN, but I can't recall the details about AWS.
MA
Mabel
1 year ago
I remember studying that GCP allows FQDN rules, but I’m not sure if AWS does or not.
SA
Sage
1 year ago
Option C seems interesting, but I'm not sure if creating a bunch of formula fields is the best way to handle this. It might get messy and hard to maintain. I think I'll go with option B or D.
ES
Esteban
1 year ago
This is a great question! I think the scrum master should definitely encourage the team member to research the issue and present their findings (option B). That way, the team can make an informed decision and potentially improve their process. It's all about continuous improvement, right?