A business is deploying its first application in a Virtual Private Cloud (VPC) and needs to configure basic network security controls. The administrator wants to use both Security Groups and Network Access Control Lists (Network ACLs) to secure their resources.
Which TWO statements correctly describe the characteristics of these security resources?
- Security groups are stateful, which means return traffic is automatically allowed.Cevap
- Network Access Control Lists (Network ACLs) are stateless, which means return traffic must be explicitly allowed by an outbound rule.Cevap
- CSecurity groups operate at the subnet level to secure all resources within a subnet.
- DNetwork Access Control Lists (Network ACLs) operate at the instance level to secure individual Amazon EC2 instances.
- ESecurity groups are stateless, requiring separate rules for inbound and outbound traffic flow.
Cevap
The correct statements are that Security groups are stateful (automatically allowing return traffic) and Network Access Control Lists (Network ACLs) are stateless (requiring explicit outbound rules for return traffic).
Security groups are stateful, meaning they automatically track connections and allow response traffic to flow back without needing a corresponding outbound rule. Conversely, Network Access Control Lists (Network ACLs) are stateless, meaning they do not track connection states, so any return traffic must be explicitly allowed by an outbound rule.
Adım Adım Çözüm
Anahtar Kavram
Stateful vs. Stateless network firewalls and their operating levels (instance vs. subnet) in AWS VPC.
Tahmini Süre:1m 0s