A company is hosting a website that must be accessible to users for HTTPS traffic. Also, port 22 should be open for administrative purposes. The administrator`s workstation has a static IP address of 203.0.113.1/32.
Which of the following security group configurations is the MOST secure but still functional to support these requirements? Choose 2 answers from the options given below.
 

Answer options:

A.Port 443 coming from 0.0.0.0/0
B.Port 443 coming from 10.0.0.0/16
C.Port 22 coming from 0.0.0.0/0
D.Port 22 coming from 203.0.113.1/32

Answer: A and D
The question asks for the following 2 requirements:
A website that must be accessible to users for HTTPS traffic (over the public Internet).
Port 22 should be open for administrative purposes for the administrator`s workstation with a static IP address of 203.0.113.1/32.
Option A is CORRECT because HTTPS traffic (over the public Internet) is allowed. This option meets the first requirement.
Option B is incorrect because by allowing so, it will only enable traffic from a particular CIDR block and not from the internet (0.0.0.0/0).
Option C is incorrect because allowing port 22 from the internet (0.0.0.0/0) is a security risk as it will allow anyone from the public internet to SSH (on port 22) into the Linux VM.
Option D is CORRECT because this allows SSH access (over port 22) for the administrators` workstation with the static IP address. This option meets the second requirement.
For more information on AWS Security Groups, please visit the following URL:
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-network-security.html