CLF-C02 · Question #639
A company uses AWS and has a VPC that includes two public subnets. The company needs to allow and deny specific inbound and outbound traffic for each public subnet. Which AWS service or tool can the c
The correct answer is A. Network ACL. A Network ACL (Access Control List) is used to allow or deny specific inbound and outbound traffic at the subnet level in a VPC. It acts as a firewall for controlling traffic in and out of one or more subnets, providing an additional layer of security. Each subnet in a VPC can be
Question
A company uses AWS and has a VPC that includes two public subnets. The company needs to allow and deny specific inbound and outbound traffic for each public subnet. Which AWS service or tool can the company use to meet this requirement?
Options
- ANetwork ACL
- BAWS WAF
- CVPC route table entry
- DSecurity group
How the community answered
(35 responses)- A94% (33)
- B3% (1)
- D3% (1)
Explanation
A Network ACL (Access Control List) is used to allow or deny specific inbound and outbound traffic at the subnet level in a VPC. It acts as a firewall for controlling traffic in and out of one or more subnets, providing an additional layer of security. Each subnet in a VPC can be associated with a network ACL, and rules are evaluated based on priority to allow or deny traffic.
Community Discussion
No community discussion yet for this question.