A solutions architect is troubleshooting a connection issue to an EC2 instance. The security group has an inbound rule allowing SSH on port 22. What else must be checked regarding the security group to ensure the response can reach the client?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Nothing; security groups are stateful and automatically allow the response

Because security groups are stateful, any allowed inbound traffic is automatically allowed to leave as a response....

📋Part of AWS Certified Solutions Architect – Associate (SAA-C03) · AWS Certification Practice
Real Exam ScenarioSecurity Groups

A solutions architect is troubleshooting a connection issue to an EC2 instance. The security group has an inbound rule allowing SSH on port 22. What else must be checked regarding the security group to ensure the response can reach the client?

✓ Correct Answer & ExplanationSecurity Groups

Correct Answer

Nothing; security groups are stateful and automatically allow the response

Why This Answer Is Correct

Because security groups are stateful, any allowed inbound traffic is automatically allowed to leave as a response.

📚 What This Question Tests

This question evaluates your knowledge of Security Groups — a core concept tested in AWS Certified Solutions Architect – Associate (SAA-C03). Understanding Security Groups is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.