Exam AWS-SysOps topic 1 question 208 discussion

C is correct

By default the outbound will allow all , so all we have to do it's add the inbound so i will go with A. Also this is a typical question from SAA

Correct Answer is A

Correct Answer: A Please remember that security groups are statefull, so the outgoing rule is not necessary.

A is correct here. The question specifically asks about an entry for the DBSecGrp group.

C. This is a twist and turn question or the author is very poor in grammar. it is actually asking how to configure WebSecGrp to access DB, thus outbound port 3306 from WebSecGrp to destination DB is correct.

It woud help if you'd put a link or rationale for your answer. But you don't...ever. Answer C. The inbound rule in your security group must allow traffic on all ports. It needs to do this because the destination port number of any inbound return packets is set to a randomly allocated port number. https://www.examtopics.com/exams/amazon/aws-sysops/view/ Also review a similarly worded question which supports answer of C. https://www.briefmenow.org/amazon/aws-sysops-user-has-created-vpc-with-the-public-and-private-subnets-using-the-vpc-wizard-the-vpc-has-cidr-20-16-the-public-subnet-uses-cidr-20-24-the-user-is/

A. Allow Inbound on port 3306 for Source Web Server Security Group (WebSecGrp)