Examkin

Soru

Zorluk: KolayAWS Network Services

A cloud practitioner is configuring network security for a new Amazon EC2 instance. They need to define firewall rules that allow inbound HTTP traffic on port 80, and the firewall must automatically allow return outbound traffic. Which Amazon VPC feature should the cloud practitioner use?

  1. Security groupCevap
  2. B
    Network access control list (network ACL)
  3. C
    IAM role
  4. D
    AWS Artifact

Cevap

Security group
The correct answer is the option indicating a security group. Security groups operate at the instance level and are stateful, meaning any allowed inbound traffic automatically permits return outbound traffic.

Adım Adım Çözüm

1
Analyze the requirements: network security at the Amazon EC2 instance level, allowing inbound traffic on port 80, and automatically allowing the return outbound traffic (stateful behavior).
Identify that the firewall must operate at the instance level and behave statefully.
This matches the definition and behavior of an AWS security group.
2
Evaluate the other options to verify they are incorrect for this scenario.
Network ACLs are stateless and subnet-level, IAM roles manage access permissions, and AWS Artifact manages compliance documents.
This confirms that only the security group meets the criteria.

Anahtar Kavram

AWS Security Groups are stateful, instance-level firewalls that automatically track connection states to allow return traffic.
Bu soruyu puanla

Konular

AWS Network Services

Bu konudan daha fazla soru