hard20 pts · first answer countsnetwork-securitycloud-networkingaws

A NACL deny that does nothing

A subnet NACL has these inbound rules, but traffic from 203.0.113.0/24 still reaches the instances. Why?

Rule 100  ALLOW  0.0.0.0/0        all
Rule 200  DENY   203.0.113.0/24   all
Rule *    DENY   0.0.0.0/0        all

A.Rule 100 matches first, so rule 200 is never reachedB.NACLs only apply to outbound trafficC.Deny rules need a security group to workD.The /24 range is too small for a NACL

Discussion 0

Join free to post in the discussion.

A NACL deny that does nothing

Discussion 0

Related questions