Examkin

Soru

Zorluk: KolayNetwork and Infrastructure Security

A company wants to secure its Virtual Private Cloud (VPC) by controlling traffic entering and leaving its subnets. The security team needs a solution that evaluates traffic using stateless rules at the subnet boundary. Which AWS resource or feature should the company configure to achieve this?

  1. Network Access Control Lists (Network ACLs)Cevap
  2. B
    Security Groups
  3. C
    Amazon GuardDuty
  4. D
    AWS Shield

Cevap

Network Access Control Lists (Network ACLs)
Network Access Control Lists (Network ACLs) act as a firewall for controlling traffic in and out of one or more subnets. They are stateless, meaning that inbound and outbound rules must be defined separately to allow traffic in both directions.

Adım Adım Çözüm

1
Determine the required evaluation level for the network traffic.
The scenario requires traffic evaluation at the subnet boundary level.
This rules out instance-level security controls.
2
Identify the required rule evaluation type (stateful vs. stateless).
The scenario explicitly requests stateless rules.
Stateless rules require separate configuration for inbound and outbound traffic.
3
Select the AWS VPC feature matching both subnet-level and stateless requirements.
Network Access Control Lists (Network ACLs) operate at the subnet level and are stateless.
This matches all criteria described in the scenario.

Anahtar Kavram

Understanding the difference between stateful Security Groups at the instance level and stateless Network ACLs at the subnet level.
Tahmini Süre:45s
Bu soruyu puanla

Konular

Network and Infrastructure Security

Bu konudan daha fazla soru