ExpertMedium1 markMultiple Choice
AWS SAA-C03 · Question 09 · Domain 1.2: Secure Workloads
A solutions architect is designing the network security for a three-tier web application in a VPC. The architect needs to implement security controls at the subnet level and the instance level.<br/><br/>Which TWO statements about VPC security are correct? (Select TWO.)
A solutions architect is designing the network security for a three-tier web application in a VPC. The architect needs to implement security controls at the subnet level and the instance level.<br/><br/>Which TWO statements about VPC security are correct? (Select TWO.)
Answer options:
A.
Security groups are stateful, meaning return traffic is automatically allowed.
B.
Network ACLs are stateful, meaning return traffic is automatically allowed.
C.
Security groups operate at the subnet level.
D.
Network ACLs are stateless, meaning return traffic must be explicitly allowed.
E.
Security groups evaluate all rules before deciding to allow traffic.
How to approach this question
Recall the differences between Security Groups and NACLs regarding statefulness.
Full Answer
Security groups are stateful, meaning return traffic is automatically allowed.<br/>Network ACLs are stateless, meaning return traffic must be explicitly allowed.
Security groups are stateful (return traffic is allowed automatically) and operate at the instance level. Network ACLs are stateless (return traffic must be explicitly allowed via outbound rules) and operate at the subnet level.
Common mistakes
Mixing up the stateful/stateless nature of SGs and NACLs.
Practice the full AWS SAA-C03 Practice Exam 6
65 questions · hints · full answers · grading
More questions from this exam
Q01A company has multiple AWS accounts in an AWS Organizations organization. The security team wants...MediumQ02A company has two AWS accounts: Account A for development and Account B for production. Developer...MediumQ03A mobile application needs to authenticate users using their social media accounts (Facebook, Goo...EasyQ04A company is running an application on Amazon EC2 instances. The application needs to connect to ...MediumQ05A company has 50 AWS accounts managed by AWS Organizations. The IT team wants to implement a cent...Easy