Study. uk . com
  1. Home
  2. All questions
  3. Question 26

AWS Certified Solutions Architect study material · question 26 of 500

An instance's security group allows outbound HTTPS but has no inbound rule for the returning traffic. Can the instance receive the response?

  1. Only if a network ACL allows the return traffic
  2. Only if the instance has a public IPv4 address
  3. Yes, because security groups are stateful
  4. No, an inbound rule is required for every reply
Show the answer

Answer: C. Yes, because security groups are stateful

A security group tracks connections, so the reply to traffic it allowed outbound is admitted without a matching inbound rule.

Source: Control traffic to your AWS resources using security groups (Amazon Web Services) — Security group basics

Challenge yourself on this topic → Study as cards