What are two main features in Amazon Web Services (AWS) network access control lists (ACLs)? (Choose two.)

Question

Options

• AYou cannot use Network ACL and Security Group at the same time.
• BThe default network ACL is configured to allow all traffic
• CNetworkACLs are stateless, and inbound and outbound rules are used for traffic filtering
• DNetwork ACLs are tied to an instance

• A
  15% (5)
• B
  79% (27)
• D
  6% (2)

Explanation

The default network ACL is configured to allow all traffic. This means that when you create a VPC, AWS automatically creates a default network ACL for that VPC, and associates it with all the subnets in the VPC. By default, the default network ACL allows all inbound and outbound IPv4 traffic and, if applicable, IPv6 traffic. You can modify the default network ACL, but you cannot delete it. Network ACLs are stateless, and inbound and outbound rules are used for traffic filtering. This means that network ACLs do not keep track of the traffic that they allow or deny, and they evaluate each packet separately. Therefore, you need to create both inbound and outbound rules for each type of traffic that you want to allow or deny. For example, if you want to allow SSH traffic from a specific IP address to your subnet, you need to create an inbound rule to allow TCP port 22 from that IP address, and an outbound rule to allow TCP port 1024-65535 (the ephemeral ports) to that IP address.

No community discussion yet for this question.