AWS Solutions Architect Associate Practice Test

When a new security group is created, what is the default setting for outbound traffic?

1. All outbound traffic is allowed

2. No outbound traffic is allowed

3. Only HTTP traffic is allowed

4. Only HTTPS traffic is allowed

The correct answer is: All outbound traffic is allowed

When a new security group is created in AWS, the default setting for outbound traffic is that all outbound traffic is allowed. This means that instances associated with the security group can initiate connections to any address on the internet without restrictions. This default policy is designed to allow flexibility and facilitate communication from the resources in the security group to other resources or services. The rationale behind this default behavior is that most applications require the ability to make connections to the internet or other resources within AWS. By allowing all outbound traffic by default, AWS ensures that users can effectively manage their resources without being immediately blocked by overly restrictive outbound rules. In practice, users can modify these settings to restrict outbound connections as needed by adding specific rules. However, the ability for all outbound traffic allows a greater level of initial access without the need for immediate fine-tuning of security group rules.