Examkin

Soru

Zorluk: KolayAWS Network Services

A company wants to secure its virtual network within Amazon VPC. They need to define stateless rules at the subnet boundary to allow or deny traffic entering and leaving the subnets. Which AWS networking feature should the company use to meet this requirement?

  1. Network Access Control List (Network ACL)Cevap
  2. B
    Security Group
  3. C
    VPC Peering connection
  4. D
    AWS Transit Gateway

Cevap

Network Access Control List (Network ACL)
The correct answer is Network Access Control List (Network ACL). A Network ACL is a stateless firewall that controls inbound and outbound traffic at the subnet level, meeting the exact requirements of the scenario.

Adım Adım Çözüm

1
Analyze the requirements in the scenario.
The scenario requires a stateless networking feature that operates at the subnet boundary to filter inbound and outbound traffic.
Identifying the key network properties (stateless, subnet boundary) is essential to choosing the correct service.
2
Evaluate the capabilities of the options against these requirements.
Network ACLs match all requirements because they are stateless firewalls operating at the subnet level. Security Groups are stateful and operate at the instance level. VPC Peering and AWS Transit Gateway are connectivity services, not subnet-level firewalls.
Comparing features helps eliminate incorrect options and confirm the correct choice.

Anahtar Kavram

Network Access Control Lists (Network ACLs) are stateless firewalls that control traffic at the subnet level.
Tahmini Süre:45s
Bu soruyu puanla

Konular

AWS Network Services

Bu konudan daha fazla soru