A startup is designing a secure, multi-VPC network architecture on AWS. They need to configure network routing between their VPCs and control incoming traffic to their Amazon EC2 instances. Which TWO of the following statements correctly describe AWS networking or security components? (Select TWO.)
- Security groups act as stateful firewalls that control traffic at the instance level.Cevap
- AWS Transit Gateway acts as a central hub to connect multiple Virtual Private Clouds (VPCs) and on-premises networks.Cevap
- CNetwork Access Control Lists (Network ACLs) are stateful firewalls that operate at the instance level.
- DSecurity groups are stateless firewalls that control traffic at the subnet level.
- EVPC Peering allows transitive routing, meaning traffic can pass through an intermediate VPC to reach another VPC.
Cevap
Security groups act as stateful firewalls at the instance level, and AWS Transit Gateway acts as a central hub to interconnect multiple VPCs and on-premises networks.
Security groups are stateful firewalls operating at the instance level, meaning outbound response traffic is allowed regardless of outbound rules. AWS Transit Gateway acts as a centralized cloud router, simplifying network architecture when interconnecting multiple VPCs and on-premises systems.
Adım Adım Çözüm
Anahtar Kavram
AWS Network Security and Routing