Machine-translated by Google. Questions are authored in English.
Top

Discussion

A security group differs from a network access control list in that a security group is

  • A.applied across a whole subnet at once
  • B.unable to filter traffic by port
  • C.stateful, allowing return traffic
  • D.stateless, requiring explicit return rules

Answer: C

The access control list is stateless and applies at the subnet boundary, so return traffic needs its own rule. Forgetting that is a common cause of connections that open but never reply. State is what distinguishes the two.

No comment is present. Be the first to comment.
Loading…

Post your comment

Please log in or register to post a comment.