Skip to content

Commit

Permalink
[aws] answered to q64
Browse files Browse the repository at this point in the history
  • Loading branch information
goodday451999 committed Oct 16, 2021
1 parent 5c2db39 commit 43ba107
Showing 1 changed file with 2 additions and 4 deletions.
6 changes: 2 additions & 4 deletions aws/aws-quiz.md
Original file line number Diff line number Diff line change
Expand Up @@ -536,12 +536,10 @@ aws ec2 reboot-instances --instance-ids i-0b263919b6498b123
aws ec2 start-instances --instance-ids i-0b263919b6498b123
```

#### Q64. What is wrong with the third incoming security group rule, which allows all traffic from sg-269afc5e to go to an

Ubuntu EC2 instance configured as a web server?
#### Q64. What is wrong with the third incoming security group rule, which allows all traffic from sg-269afc5e to go to an Ubuntu EC2 instance configured as a web server?

- [ ] All traffic on all ports is being denied into this instance, which overwrites the HTTP rule and makes it redundant.
- [ ] The instance was launched with the default security group, but there is no way for an administrator to SSH into the instance.
- [x] The instance was launched with the default security group, but there is no way for an administrator to SSH into the instance.
Add another rule that allows for SSH access from a secured source, such as a single IP or a range of managed IP addresses.
- [ ] There is nothing wrong with this security group rule. Assuming that sg-269afc5e is applied to other resources that are properly
secured, this rule allows all traffic to pass through that is also assigned security group sg-269afc5e.
Expand Down

0 comments on commit 43ba107

Please sign in to comment.