Explanation:
Security groups do not have explicit deny rules, making option A incorrect. A Network ACL (NACL) is stateless and supports explicit deny rules, which would result in a REJECT entry in the VPC flow logs if it blocks traffic. Therefore, the network ACL blocking HTTPS traffic is the most likely cause of the failed connections shown in VPC flow logs.
Ultimate access to all questions.
A company hosts a web application on an Amazon EC2 instance in a production VPC. Client connections to the application are failing. A SysOps administrator inspects the VPC flow logs and finds the following entry: What is a possible cause of these failed connections?
A
A security group deny rule is blocking traffic on port 443.
B
The EC2 instance is shut down.
C
The network ACL is blocking HTTPS traffic.
D
The VPC has no internet gateway attached.
No comments yet.