Close the web tier without a deny rule
Try this labAll CLF-C02 practice
- Certification
- CLF-C02
- Format
- Rule table
- Difficulty
- easy
- Estimated time
- 10 min
- Automated checks
- 6
SCENARIO
A marketing site launched with overly broad inbound access. HTTPS must remain public, administration must be available only from company VPN 10.50.0.0/24, and the database port must be inaccessible. The launch-week rules remain in place.
TASK
Repair the web tier's inbound security-group rules so public TCP 443 and VPN-only TCP 22 are the only permitted flows. Keep the site and approved administration working; grant no other inbound access.