Exam ANS-C00 topic 1 question 53 discussion

I think its D - When the reply packet goes from the web server to internet, source port =80 destination port = can be anything between 1024-65535 Since NACLs looks at the destination port answer should be D

I did simulate this problem by blocking outbound rules in NACL as well ass security group. Ass per my investigation EC2 (web server) need ephermal ports (1024 - 65535) allowed in order to respond back to HTTP GET request. Soo answer-D is correct.

D is correct.

Correct Answer D

It is D, as you havent't allowed ephemeral ports on the outbound NACL, the request will ingress on port 80 to the server from the client, the server will respond on an ephemeral (port 1024-65535) which and the egress response be blocked by the outbound NACL

D is correct

A,B are out since SG is stateful, only need to have inbound rule to allow port 80 C is out return packet use ports 1024-65535 not Port 80 Answer D

Answer should be B and/or D. Security AND NACL outbound is not configured. both should have ephemeral ports opened for connectivity.

D is correct

Answer:D To enable the connection to a service running on an instance, the associated network ACL must allow both inbound traffic on the port that the service is listening on as well as allow outbound traffic from ephemeral ports. When a client connects to a server, a random port from the ephemeral port range (1024-65535) becomes the client's source port. The designated ephemeral port then becomes the destination port for return traffic from the service, so outbound traffic from the ephemeral port must be allowed in the network ACL. https://aws.amazon.com/premiumsupport/knowledge-center/resolve-connection-sg-acl-inbound/

I am bit confused .. It says in the Q there no NACL outbound for port 80 is configured right? NACL is Stateless , So NACL outbound port 80 need be added right ? The communications is through port 80 right ? please advise !!

Yes D its correct

Should be allowed ephemeral ports on outbound NACL. So it's D.

I agree, D is the right answer.

DDDDDDDD