nerdexam
Amazon

CLF-C02 · Question #458

A company needs to apply security rules to a subnet for Amazon EC2 instances. Which AWS service or feature provides this functionality?

The correct answer is A. Network ACLs. Network ACLs (Access Control Lists) provide a stateless layer of security that applies to an entire subnet in Amazon VPC. They allow you to control inbound and outbound traffic at the subnet level, making them suitable for applying security rules to EC2 instances within the subne

Submitted by naveen.iyer· Mar 6, 2026Security and Compliance

Question

A company needs to apply security rules to a subnet for Amazon EC2 instances. Which AWS service or feature provides this functionality?

Options

  • ANetwork ACLs
  • BSecurity groups
  • CAWS Certificate Manager (ACM)
  • DAWS Config

How the community answered

(24 responses)
  • A
    88% (21)
  • B
    4% (1)
  • D
    8% (2)

Explanation

Network ACLs (Access Control Lists) provide a stateless layer of security that applies to an entire subnet in Amazon VPC. They allow you to control inbound and outbound traffic at the subnet level, making them suitable for applying security rules to EC2 instances within the subnet. Security groups are also used for security but apply at the instance level, not the subnet level.

Community Discussion

No community discussion yet for this question.

Full CLF-C02 Practice