Firewall PBQs: CompTIA Cloud+ (CV0-004)

You are a cloud administrator reviewing the security group rules for a web application instance in a VPC. The instance serves a public-facing website over HTTPS. A security review found that SSH ingress is allowed from any source, which violates company policy. Correct the security group: keep HTTPS open to the internet, restrict SSH to the management subnet (10.0.2.0/24) only, and add a default deny rule for all other ingress traffic.