Premium Challenge labbeginnerblue teamAWS
Configure Security Groups (SGs) and NACLs
Learn how to configure security groups (SGs) and network access control lists (NACLs) for multiple different realistic use cases and following best practices.
- No step-by-step guide
Scenario
This is a challenge lab. Each task tells you what to build, not how to build it. You work out the steps yourself.
Your lab account holds a VPC with two public subnets and two private subnets. You must build the network controls for it. Create four security groups: one for web servers, one for app servers, one for IT administration, and one for a database. Then create two network ACLs, one for the public subnets and one for the private subnets.
How this challenge works
- No step-by-step guide. You get the goal and the access. The path is yours to find.
- 4 check questions. Confirm you are on the right track as you go.
What you will practice
- Create a security group that opens only the ports a web tier needs.
- Use one security group as the source of a rule on another security group.
- Limit administrative access to a short list of IP addresses.
- Create network ACLs for public subnets and for private subnets.
- Explain how a stateful security group differs from a stateless NACL.
Challenge lab
Configure Security Groups (SGs) and NACLs
Included in Cybr Premium.