Soru

Zorluk: KolayNetwork and Infrastructure Security

A business is deploying its first application in a Virtual Private Cloud (VPC) and needs to configure basic network security controls. The administrator wants to use both Security Groups and Network Access Control Lists (Network ACLs) to secure their resources.

Which TWO statements correctly describe the characteristics of these security resources?

  1. Security groups are stateful, which means return traffic is automatically allowed.Cevap
  2. Network Access Control Lists (Network ACLs) are stateless, which means return traffic must be explicitly allowed by an outbound rule.Cevap
  3. C
    Security groups operate at the subnet level to secure all resources within a subnet.
  4. D
    Network Access Control Lists (Network ACLs) operate at the instance level to secure individual Amazon EC2 instances.
  5. E
    Security groups are stateless, requiring separate rules for inbound and outbound traffic flow.

Cevap

The correct statements are that Security groups are stateful (automatically allowing return traffic) and Network Access Control Lists (Network ACLs) are stateless (requiring explicit outbound rules for return traffic).
Security groups are stateful, meaning they automatically track connections and allow response traffic to flow back without needing a corresponding outbound rule. Conversely, Network Access Control Lists (Network ACLs) are stateless, meaning they do not track connection states, so any return traffic must be explicitly allowed by an outbound rule.

Adım Adım Çözüm

1
Analyze the traffic tracking behavior of Security Groups.
Security Groups are stateful. Once a connection is established inbound, outbound return traffic is automatically permitted.
To determine which network security controls automatically allow return traffic.
2
Analyze the traffic tracking behavior of Network ACLs.
Network ACLs are stateless. Rules must be defined for both inbound and outbound traffic to allow return communication.
To verify how Network ACLs evaluate traffic in both directions.
3
Analyze the boundaries where Security Groups and Network ACLs operate.
Security Groups operate at the instance level (specifically the Elastic Network Interface), while Network ACLs operate at the subnet level.
To reject options that confuse the boundary levels of these security controls.

Anahtar Kavram

Stateful vs. Stateless network firewalls and their operating levels (instance vs. subnet) in AWS VPC.
Tahmini Süre:1m 0s
Bu soruyu puanla