Examkin

Question

Difficulty: EasyAWS Network Services

A cloud practitioner is configuring network security for a new Amazon EC2 instance. They need to define firewall rules that allow inbound HTTP traffic on port 80, and the firewall must automatically allow return outbound traffic. Which Amazon VPC feature should the cloud practitioner use?

  1. Security groupAnswer
  2. B
    Network access control list (network ACL)
  3. C
    IAM role
  4. D
    AWS Artifact

Answer

Security group
The correct answer is the option indicating a security group. Security groups operate at the instance level and are stateful, meaning any allowed inbound traffic automatically permits return outbound traffic.

Step-by-Step Solution

1
Analyze the requirements: network security at the Amazon EC2 instance level, allowing inbound traffic on port 80, and automatically allowing the return outbound traffic (stateful behavior).
Identify that the firewall must operate at the instance level and behave statefully.
This matches the definition and behavior of an AWS security group.
2
Evaluate the other options to verify they are incorrect for this scenario.
Network ACLs are stateless and subnet-level, IAM roles manage access permissions, and AWS Artifact manages compliance documents.
This confirms that only the security group meets the criteria.

Key Concept

AWS Security Groups are stateful, instance-level firewalls that automatically track connection states to allow return traffic.
Rate this question

Topics

AWS Network Services

More questions from this topic