Close the web tier without a deny rule
A hands-on CLF-C02 lab. You produce the real artefact and 6 automated checks verify it behaves the way the exam expects.
Try this labAll CLF-C02 practice
- Certification
- CLF-C02
- Format
- Rule table
- Difficulty
- easy
- Estimated time
- 10 min
- Automated checks
- 6
The brief
Leave the web tier's inbound rules permitting exactly what the review approved: anyone on the internet to the site on TCP 443, and the company VPN range to the administrative port on TCP 22. A security group holds allow rules only - there is no deny rule to add and no order to get right - so access ends when the rule granting it is removed, and anything no rule allows is refused already. Keep the public site working and keep a way in for administrators.
Part of CLF-C02 preparation
Labs are written by ExamNova to teach the decisions the exam tests. They are not reproductions of vendor lab content.