Free SCS-C03 Web TestEngine Demo

Exit VCEDump SCS-C03 AWS Certified Security - Specialty

Q28 Single choice

A security engineer configures a stateless network ACL for a public subnet. Instances in the subnet need to initiate HTTPS connections to trusted external services. The engineer also must block inbound database connections to the subnet.

A
Allow inbound TCP 443 only and deny outbound ephemeral ports.
B
Allow outbound database port traffic and rely on security groups to permit HTTPS responses.
C
Deny all inbound ephemeral ports and allow only inbound database port traffic from the internet.
D
Allow outbound TCP 443, allow inbound ephemeral response ports, and deny inbound database port traffic with a lower rule number than any broad allow.

Previous Check answer

Question map28 / 39

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39

Current Correct Answered Incorrectly Reviewed 0 Remaining 39

Marked Questions0

No marked questions.

Answered Incorrectly0

No incorrect answers.

SCS-C03 Web TestEngine demo