A cloud practitioner is planning the network security layout for an Amazon VPC. Which two of the following statements correctly describe the characteristics of security groups and Network Access Control Lists (NACLs)?
- Security groups are stateful, meaning return traffic is automatically allowed regardless of outbound rules.Cevap
- Network ACLs operate at the subnet level and act as a firewall for controlling traffic entering and leaving one or more subnets.Cevap
- CSecurity groups operate at the subnet level to protect all resources residing within that subnet.
- DNetwork ACLs are stateful, meaning any allowed inbound traffic is automatically permitted to flow outbound.
- EAWS automatically configures and manages custom rules for both security groups and network ACLs under the Shared Responsibility Model.
Cevap
Security groups are stateful (inbound allowed traffic automatically allows return traffic) and Network ACLs operate at the subnet level as a firewall.
The correct options are that security groups are stateful (allowing return traffic automatically) and Network ACLs operate at the subnet boundary as firewalls. These represent the standard configuration and operational boundaries for VPC network security.
Adım Adım Çözüm
Anahtar Kavram
Understanding the difference between stateful security groups (instance-level) and stateless Network ACLs (subnet-level), and the customer responsibility for network security configuration.