A company needs a firewall that will control network connections to and from a single Amazon EC2 instance. This firewall will not control network connections to and from other instances that are in th

Question

Options

• ANetwork ACL
• BAWS WAF
• CRoute table
• DSecurity group

• A
  2% (1)
• B
  3% (2)
• C
  2% (1)
• D
  94% (60)

Explanation

Security Groups act as virtual firewalls at the instance level, meaning they control inbound and outbound traffic for a specific EC2 instance without affecting other instances in the same subnet - perfectly matching the requirement.

• A (Network ACL) is incorrect because Network ACLs operate at the subnet level, applying rules to all resources within that subnet, not just a single instance.
• B (AWS WAF) is incorrect because WAF is a web application firewall designed to filter HTTP/HTTPS traffic for web exploits (like SQL injection), not a general-purpose network firewall for EC2 instances.
• C (Route table) is incorrect because route tables control traffic routing between subnets and networks - they don't filter or block connections like a firewall.

Memory Tip: Think "S" for Specific - Security groups protect specific instances, while Network ACLs protect the entire Neighborhood (subnet). If the question mentions controlling traffic for one instance without affecting others, always think Security Group first.

No community discussion yet for this question.