You are working in a College as a Cloud Technical Advisor, and your college was maintaining all its data locally where they felt security and redundancy issues. So, you suggested deploying the application in AWS and use a NoSQL database for their database. While deploying the servers in AWS, the team needs your suggestion for creating newSecurity Groups. Can you select which of the following Option given by the team is true? (Select 2)

Answer options:

A.Security Group supports "allow rules" and "deny rules".
B.The default rules in asecurity group disallows all incoming traffic.
C.By default, outbound traffic is allowed
D.Security Group is the first layer of security.

Correct Answer - B and C
Option A is incorrect because the Security Group supports allow rules only. To deny rules, Network ACLs should be used.
Option B is CORRECT because, by default, custom SG has no Inbound rules.
Option C is CORRECT because, by default, all Outgoing Traffic is allowed in the custom Security Group.
Option D is incorrect because the security group works at the instance level, hence not the first security level.The first level is NACL to the subnet, and SG is to the instance.
Refer: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-network-security.html
https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html