nerdexam
Amazon

CLF-C02 · Question #789

A company wants to control traffic between its application and Amazon DynamoDB. The company hosts the application on Amazon EC2 instances within VPC subnets. Which AWS services or features should the

The correct answer is C. Network ACLs D. VPC endpoints. Network ACLs provide stateless traffic filtering at the subnet level, allowing the company to control inbound and outbound traffic to and from the EC2 instances. VPC endpoints (specifically DynamoDB Gateway Endpoints) enable private connectivity between the VPC and DynamoDB witho

Submitted by skyler.x· Mar 6, 2026Security and Compliance

Question

A company wants to control traffic between its application and Amazon DynamoDB. The company hosts the application on Amazon EC2 instances within VPC subnets. Which AWS services or features should the company use to manage this traffic? (Choose two.)

Options

  • AAWS WAF
  • BAWS Shield
  • CNetwork ACLs
  • DVPC endpoints
  • EAWS Global Accelerator

How the community answered

(47 responses)
  • A
    2% (1)
  • B
    11% (5)
  • C
    83% (39)
  • E
    4% (2)

Explanation

Network ACLs provide stateless traffic filtering at the subnet level, allowing the company to control inbound and outbound traffic to and from the EC2 instances. VPC endpoints (specifically DynamoDB Gateway Endpoints) enable private connectivity between the VPC and DynamoDB without traversing the public internet, providing both control and security over the traffic.

Community Discussion

No community discussion yet for this question.

Full CLF-C02 Practice