A company is setting up a secure network infrastructure inside Amazon Virtual Private Cloud (Amazon VPC). To protect their resources, they want to understand the key differences between security groups and network access control lists (network ACLs). Which two statements correctly describe the characteristics of these network security features?
- Security groups are stateful, meaning return traffic is automatically allowed.Cevap
- Network ACLs are stateless, meaning return traffic must be explicitly allowed by rules.Cevap
- CSecurity groups are stateless and operate at the subnet level.
- DNetwork ACLs are stateful and operate at the instance level.
- EVPC Peering functions as a centralized gateway to manage traffic flow between individual subnets.
Cevap
Security groups are stateful, meaning return traffic is automatically allowed; and network ACLs are stateless, meaning return traffic must be explicitly allowed by rules.
Security groups are stateful, meaning that if you send an inbound request, the outbound response is automatically allowed. Conversely, network ACLs are stateless, requiring you to configure explicit inbound and outbound rules for traffic to flow in both directions.
Adım Adım Çözüm
Anahtar Kavram
VPC Security: Security Groups vs Network ACLs
Tahmini Süre:45s