By configuring network ACL and security group policy, the safe use of servers in VPC can be guaranteed. The security group mainly protects the server, and the network ACL mainly protects the subnet.

Question

Options

• ATrue
• BFalse

• A
  86% (24)
• B
  14% (4)

Explanation

Option A is correct because in a VPC, security groups and network ACLs serve complementary but distinct roles: security groups function as stateful firewalls applied directly to individual instances (servers), controlling inbound and outbound traffic at the resource level, while network ACLs are stateless firewalls applied at the subnet boundary, controlling traffic flowing in and out of entire subnets. This layered architecture means both mechanisms work together to provide defense-in-depth - network ACLs filter traffic before it reaches any instance within the subnet, and security groups apply a second layer of filtering at the instance itself. Option B is incorrect because the statement in the question accurately reflects how these two controls are designed and scoped.

Memory tip: Think of network ACLs as the gate at the entrance to a neighborhood (subnet) and security groups as the lock on each individual house (server) - both restrict access, but at different levels of granularity.

No community discussion yet for this question.