OpenStack Security Groups JN0-214 Practice Questions (Page 3)

Questions 11–14

1. 11foundation · easy

   Can you add a security group to an existing instance after it has been launched?

   • AYes, but only by deleting and recreating the instance
   • BYes, but only through the Horizon dashboard, not the CLI
   • CNo, security groups can only be assigned during instance creation
   • DYes, by using the 'openstack server add security group' command
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A cloud administrator is explaining security groups to a new team member. The team member asks how security groups differ from network ACLs. Which statement is accurate?

   • ASecurity groups and network ACLs are both stateful and applied to instances.
   • BSecurity groups are stateless and applied to subnets, while network ACLs are stateful and applied to instances.
   • CSecurity groups and network ACLs are both stateless and applied to subnets.
   • DSecurity groups are stateful and applied to instances, while network ACLs are stateless and applied to subnets.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the effect of deleting a security group rule in OpenStack?

   • AAll instances using the security group are shut down
   • BThe entire security group is deleted
   • CThe rule is removed and traffic that matched it is no longer explicitly allowed
   • DThe rule is disabled but remains in the group
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   An instance cannot be reached via SSH from the internet. Which security group configuration is the most likely cause?

   • AThe instance has a floating IP assigned
   • BThe security group has an egress rule allowing all traffic
   • CThe security group does not have an ingress rule allowing TCP port 22 from 0.0.0.0/0
   • DThe security group allows ICMP traffic
   Reveal Solution Discussion Select an answer first