An AWS cloud practitioner is configuring network security within a Virtual Private Cloud (VPC). To ensure proper network isolation, they need to identify the operational differences between Security Groups and Network Access Control Lists (Network ACLs). Which of the following statements correctly describe the behavior of these security controls? (Select TWO.)
- Security groups are stateful, meaning that return traffic is automatically allowed regardless of outbound rules.Cevap
- Network Access Control Lists (Network ACLs) are stateless, meaning that return traffic must be explicitly allowed by rules in both directions.Cevap
- CSecurity groups operate at the subnet boundary and apply to all resources contained within that subnet.
- DNetwork Access Control Lists (Network ACLs) operate at the EC2 instance level, acting as a dedicated host firewall.
- EUnder the AWS Shared Responsibility Model, the customer is responsible for managing the physical security of the network infrastructure.
Cevap
Security groups are stateful, meaning return traffic is automatically allowed; and Network Access Control Lists (Network ACLs) are stateless, meaning return traffic must be explicitly allowed in both directions.
The correct options are the statements indicating that Security Groups are stateful and Network Access Control Lists (Network ACLs) are stateless. In AWS, Security Groups automatically allow return traffic for any established connection, while Network ACLs require explicit inbound and outbound rules to permit traffic in both directions.
Adım Adım Çözüm
Anahtar Kavram
The operational differences between stateful Security Groups at the instance level and stateless Network ACLs at the subnet level.
Tahmini Süre:45s