Minimize open egress ports in a new VPC behind a firewall. Which firewall rule configuration should you use?

The correct approach is to create a low-priority (65534) egress-deny rule and a higher-priority (1000) allow rule for only the required ports. Firewall rules are evaluated by priority, with lower numbers indicating higher priority. By default, VPC networks have an implicit allow egress rule. To minimize open egress ports, you first deny all egress traffic with a low-priority rule. Then, you create specific, higher-priority allow rules for only the necessary ports and protocols. This ensures that only explicitly permitted traffic can leave your VPC, adhering to the principle of least privilege. The other options are incorrect because: Creating a high-priority rule that includes both ingress and egress ports is not specific enough for egress control and might open unnecessary ingress ports. Creating a high-priority egress-deny rule and a low-priority allow rule would mean the deny rule takes precedence, blocking all egress traffic. Creating a high-priority rule that allows only the required ports without a general deny rule would still allow all other egress traffic due to the implicit allow rule.