Ravi Sir's Cyber Security Cards › Interview Cards
What is a security group rule you would never leave open on a public Elastic IP for Sahyadri Traders?
What is a security group rule you would never leave open on a public Elastic IP for Sahyadri Traders? Never leave MySQL (3306), RDP (3389) or admin panels open to 0.0.0.0/0 (the whole internet). Allow 443 from the internet if the site must be public. Allow SSH (22) only from your home or office IP.
Read card text
What this card says
Short answer
Never leave MySQL (3306), RDP (3389) or admin panels open to 0.0.0.0/0 (the whole internet).
Better rule
Allow 443 from the internet if the site must be public. Allow SSH (22) only from your home or office IP.
Say it in the interview
“Database and admin ports are never open to the world. I scope SSH to my own IP.”
Why it matters
Open admin and database ports are scanned and attacked within minutes of going live.
Learn more in the lesson: 46.2 Networking Interview Questions