Examkin

Question

Difficulty: EasyAWS Network Services

A company wants to secure its virtual network within Amazon VPC. They need to define stateless rules at the subnet boundary to allow or deny traffic entering and leaving the subnets. Which AWS networking feature should the company use to meet this requirement?

  1. Network Access Control List (Network ACL)Answer
  2. B
    Security Group
  3. C
    VPC Peering connection
  4. D
    AWS Transit Gateway

Answer

Network Access Control List (Network ACL)
The correct answer is Network Access Control List (Network ACL). A Network ACL is a stateless firewall that controls inbound and outbound traffic at the subnet level, meeting the exact requirements of the scenario.

Step-by-Step Solution

1
Analyze the requirements in the scenario.
The scenario requires a stateless networking feature that operates at the subnet boundary to filter inbound and outbound traffic.
Identifying the key network properties (stateless, subnet boundary) is essential to choosing the correct service.
2
Evaluate the capabilities of the options against these requirements.
Network ACLs match all requirements because they are stateless firewalls operating at the subnet level. Security Groups are stateful and operate at the instance level. VPC Peering and AWS Transit Gateway are connectivity services, not subnet-level firewalls.
Comparing features helps eliminate incorrect options and confirm the correct choice.

Key Concept

Network Access Control Lists (Network ACLs) are stateless firewalls that control traffic at the subnet level.
Estimated Time:45s
Rate this question

Topics

AWS Network Services

More questions from this topic