🔥 40% Off Crucial Exams Memberships — This Week Only

2 days, 9 hours remaining!

ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

Your company hosts several Amazon EC2 Linux bastion hosts in a private subnet. Operations engineers must connect from the on-premises corporate network to administer these instances. To comply with the principle of least privilege, you need to add a single inbound rule to the bastion hosts' security group that enables this management access while exposing the minimum necessary attack surface. Which rule meets the requirement?

  • Allow inbound TCP traffic on port 23 from any IPv4 address (0.0.0.0/0)

  • Allow inbound TCP traffic on port 3389 from the corporate network's public IP range

  • Allow inbound TCP traffic on port 22 from the corporate network's public IP range

  • Allow inbound UDP traffic on port 22 from any IPv4 address (0.0.0.0/0)

ISC2 Systems Security Certified Practitioner (SSCP)
Network and Communication Security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot