Firewall PBQs: AWS Certified Solutions Architect - Associate (SAA-C03)

You are designing security groups for a three-tier web application. The web tier security group in the public subnet (10.0.1.0/24) currently allows both HTTPS and MySQL traffic from the internet. The web tier should only accept HTTPS from the internet -- it should never be directly accessible on the database port. Add a default deny rule. Fix the security group.