Discussion
Assertion (A): A network access control list requires rules for both directions of a connection.
Reason (R): It is stateless and does not track that an outbound connection was established.
Answer: A
Correct answer: Both A and R are true, and R is the correct explanation of A
Both are true and the reason is the cause. A network ACL is stateless, so it evaluates each packet on its own and knows nothing of the connection it belongs to - which means the return traffic needs its own rule, typically permitting the ephemeral port range. A security group is stateful and does track the connection, so allowing the inbound request is enough for the reply to leave. Confusing the two is the most common cause of traffic being silently dropped.
Post your comment
Please log in or register to post a comment.
Examination Categories
- SSC Exams
- Banking Exams
- Teaching Exams
- Civil Services Exams
- Railways Exams
- Engineering Recruitment Exams
- Defence Exams
- State Government Exams
- Police Exams
- Insurance Exams
- Nursing Exams
- Other Government Exams
- NRA CET
- PG Entrance Exams
- Campus Placement
- MBA Entrance Exams
- CUET and UG Entrance
- Judiciary Exams
- Regulatory Body Exams
- Software Development