Question

In this scenario, we have a NACL with the following rules.

|Rules|Traffic|

|----:|------:|

|*Rule#1*|Allow SSH|

|*Rule#2*|Allow HTTP|

|*Rule#3*|Deny All|

|*Rule#4*|Allow All|

Which is true based on the rules within this NACL?

​

a) All traffic will be allowed.

​

b) All traffic will be denied

​

c) All traffic except SSH and HTTP will be denied

​

d) SSH traffic will be denied.

Answer 1

c) All traffic except SSH and HTTP will be denied

Based on the NACL rules, all traffic besides SSH and HTTP will be denied. There's an explicit deny for all traffic, but SSH and HTTP are allowed by earlier rules. Those rules will take precedence over the later rules. Video for reference: VPC Subnets, Security Groups, and NACLs