Examkin

Question

Difficulty: EasyNetwork and Infrastructure Security

A company wants to secure its Virtual Private Cloud (VPC) by controlling traffic entering and leaving its subnets. The security team needs a solution that evaluates traffic using stateless rules at the subnet boundary. Which AWS resource or feature should the company configure to achieve this?

  1. Network Access Control Lists (Network ACLs)Answer
  2. B
    Security Groups
  3. C
    Amazon GuardDuty
  4. D
    AWS Shield

Answer

Network Access Control Lists (Network ACLs)
Network Access Control Lists (Network ACLs) act as a firewall for controlling traffic in and out of one or more subnets. They are stateless, meaning that inbound and outbound rules must be defined separately to allow traffic in both directions.

Step-by-Step Solution

1
Determine the required evaluation level for the network traffic.
The scenario requires traffic evaluation at the subnet boundary level.
This rules out instance-level security controls.
2
Identify the required rule evaluation type (stateful vs. stateless).
The scenario explicitly requests stateless rules.
Stateless rules require separate configuration for inbound and outbound traffic.
3
Select the AWS VPC feature matching both subnet-level and stateless requirements.
Network Access Control Lists (Network ACLs) operate at the subnet level and are stateless.
This matches all criteria described in the scenario.

Key Concept

Understanding the difference between stateful Security Groups at the instance level and stateless Network ACLs at the subnet level.
Estimated Time:45s
Rate this question

Topics

Network and Infrastructure Security

More questions from this topic