A security group is associated with an EC2 instance. The group has an inbound rule allowing port 80 (HTTP) from 0.0.0.0/0. What happens to the outbound traffic from the instance on port 80?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: It is automatically allowed because Security Groups are stateful

Because they are stateful, responses to allowed inbound requests are automatically allowed to leave the instance....

📋Part of AWS Certified Solutions Architect – Associate (SAA-C03) · AWS Certification Practice
Real Exam ScenarioSecurity Groups

A security group is associated with an EC2 instance. The group has an inbound rule allowing port 80 (HTTP) from 0.0.0.0/0. What happens to the outbound traffic from the instance on port 80?

✓ Correct Answer & ExplanationSecurity Groups

Correct Answer

It is automatically allowed because Security Groups are stateful

Why This Answer Is Correct

Because they are stateful, responses to allowed inbound requests are automatically allowed to leave the instance.

📚 What This Question Tests

This question evaluates your knowledge of Security Groups — a core concept tested in AWS Certified Solutions Architect – Associate (SAA-C03). Understanding Security Groups is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.