JN0-411: Cloud, SpecialistDemo

Question

Refer to the exhibit.

Question Image

You are attempting to connect virtual machine A to virtual machine B. Virtual machine A is a member of the WebServers security group. Virtual machine B is a member of the default security group.

Based on the exhibit, which two actions would you take on the default security group to permit access to virtual machine A?

Choose two

A Add an egress rule to the default security group to allow VM A’s IP address.
B Add an ingress rule to the default security group to allow the WebServers security group.
C Add an egress rule to the default security group to allow the WebServers security group.
D Add an ingress rule to the default security group to allow VM A’s IP address.

Explanation

OpenStack security groups control inbound traffic with ingress rules and outbound traffic with egress rules. The default security group shown already permits egress traffic, while its ingress rules allow only the default group. Adding an ingress rule that permits either the WebServers security group or VM A’s IP address authorizes traffic from VM A to VM B; stateful security groups permit the associated return traffic.

Learn more

Neutron documentation — Security groups

JN0-411: Cloud, SpecialistDemo

AstroTutor

Notes

Readiness

QuestionQ43

Community Discussion