Examkin

Soru

Zorluk: KolayNetwork and Infrastructure Security

A cloud administrator is designing the network security architecture for a multi-tier application. The administrator needs to implement a firewall barrier at the boundary of a subnet that evaluates traffic flow in both directions independently (stateless). Which AWS resource must be used to achieve this?

  1. Network Access Control Lists (Network ACLs)Cevap
  2. B
    Security Groups
  3. C
    Amazon GuardDuty
  4. D
    AWS physical security systems

Cevap

Network Access Control Lists (Network ACLs)
Network Access Control Lists (Network ACLs) are the correct answer because they serve as a stateless firewall at the subnet level, inspecting traffic entering and exiting the subnet and requiring explicit rules for both directions.

Adım Adım Çözüm

1
Identify the required network boundary for the security barrier.
The requirement specifies a barrier at the boundary of a subnet rather than at the individual instance level.
This narrows the choices down to subnet-level security features like Network ACLs.
2
Identify the evaluation state behavior required by the scenario.
The firewall must be stateless (evaluating traffic flow in both directions independently).
Network ACLs are stateless, meaning that outbound return traffic must be explicitly allowed, whereas Security Groups are stateful and automatically allow return traffic.

Anahtar Kavram

Stateful vs. Stateless Network Firewalls at Subnet and Instance Levels
Bu soruyu puanla

Konular

Network and Infrastructure Security

Bu konudan daha fazla soru