MENU
Your company's security team wants to limit the type of inbound traffic that can reach your web servers to protect against security threats. You need to configure the firewall rules on the web servers within your Virtual Private Cloud (VPC) to handle HTTP and HTTPS web traffic for TCP only. What should you do?
Suggested Answer: C
Get Premium Professional Cloud Network Engineer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
14 comments · newest first
RE
Rex
10 months ago
Just to clarify, does this mean all IPs can access the web server?
TA
Tammara
10 months ago
Wait, why are we allowing TCP port 60? That seems off.
CH
Chuck
10 months ago
I disagree, option A is too limited. We need 443 too!
EL
Elfriede
11 months ago
Option C is the right choice! It covers both HTTP and HTTPS.
AL
Albina
11 months ago
Totally agree with C, it’s the best way to secure the servers.
JU
Justine
11 months ago
I definitely recall that we should be using TCP for web traffic, but I can't remember if we should allow all IPs or restrict it somehow. I hope I chose the right option!
EM
Emogene
11 months ago
I'm a bit confused about the difference between ingress and egress rules. I thought we only needed to allow incoming traffic, so why would we consider egress options?
WE
Wenona
11 months ago
I remember practicing a similar question where we had to allow both HTTP and HTTPS. I feel like option C might be the right choice since it covers both ports.
DO
Dominga
12 months ago
I think we need to focus on ingress rules since we're controlling incoming traffic, right? But I'm not sure if it's just for port 80 or if we need to include 443 as well.
GA
Gail
12 months ago
I'm a little unsure about this one. The wording is a bit tricky. I'm leaning towards C, but I'm not 100% confident. Might need to re-read the question a few times.
MA
Marge
1 year ago
I'm pretty sure the answer is C. The question specifically says we need to handle HTTP and HTTPS web traffic, and the ingress rule with the 'web-server' target tag is the best way to do that.
DA
Daniela
1 year ago
Okay, let me think this through. We need to allow HTTP and HTTPS traffic, so that means we need to open ports 80 and 443. And since it's inbound traffic, we'll need an ingress rule. I'm going with C.
ST
Stacey
1 year ago
Hmm, I'm a bit confused. Do we need to create an ingress or egress rule? And should we be allowing all IP addresses or just the web server IP addresses?
MA
Mayra
1 year ago
This looks pretty straightforward. I think the answer is C - create an allow on match ingress firewall rule with the target tag 'web-server' to allow all IP addresses for TCP ports 80 and 443.