Aviatrix ACE Exam - Topic 8 Question 51 Discussion

Actual exam question for Aviatrix's ACE exam

Question #: 51
Topic #: 8

[All ACE Questions]

AWS Security Group, Azure Network Security Group, GCP Firewall Service, by default support FQDN based firewall rules (e.g. www.yahoo.com) as a destination in their configuration, to allow/block traffic to the specified domain.

GCP Firewall Service, others not AWS Security Group does, others not

ATrue

BFalse

Show Suggested Answer

Suggested Answer: A

FQDN -- Fully Qualified Domain Name.

Azure Firewall Applicaon Rule: Configure fully qualified domain names (FQDNs) that can be accessed from a subnet. In Azure, You can limit outbound HTTP/S traffic to a specified list of fully qualified domain names (FQDN) including wild cards.

AWS - You can use a third-party solution to implement highly available, secure FQDN Egress Filtering

service.

by Valentin at Jul 27, 2022, 07:47 PM

Limited Time Offer

25%

Off

Get Premium ACE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lenita

4 months ago

Sounds a bit confusing, I need to double-check that info!

upvoted 0 times

...

Brock

4 months ago

Azure also doesn't support FQDN by default, just like AWS.

upvoted 0 times

...

Charolette

5 months ago

Wait, are you sure about AWS? I thought they had some FQDN options.

upvoted 0 times

...

Dottie

5 months ago

Totally agree, AWS is more restrictive with that.

upvoted 0 times

...

Weldon

5 months ago

GCP Firewall Service supports FQDN rules, but AWS Security Groups don't.

upvoted 0 times

...

Paola

5 months ago

I’m pretty sure GCP is the only one that explicitly supports FQDN in its firewall rules, but I could be wrong about Azure.

upvoted 0 times

...

Paris

5 months ago

I feel like the statement is misleading; I thought AWS Security Groups didn't support FQDN by default.

upvoted 0 times

...

Renea

5 months ago

I think I saw a practice question that mentioned Azure supports FQDN, but I can't recall the details about AWS.

upvoted 0 times

...

Mabel

5 months ago

I remember studying that GCP allows FQDN rules, but I’m not sure if AWS does or not.

upvoted 0 times

...

Sage

5 months ago

Option C seems interesting, but I'm not sure if creating a bunch of formula fields is the best way to handle this. It might get messy and hard to maintain. I think I'll go with option B or D.

upvoted 0 times

...

Esteban

5 months ago

This is a great question! I think the scrum master should definitely encourage the team member to research the issue and present their findings (option B). That way, the team can make an informed decision and potentially improve their process. It's all about continuous improvement, right?

upvoted 0 times

...