nerdexam
Amazon

SOA-C02 · Question #320

Application A runs on Amazon EC2 instances behind a Network Load Balancer (NLB). The EC2 instances are in an Auto Scaling group and are in the same subnet that is associated with the NLB. Other…

The correct answer is D. The network ACL that is associated with the subnet does not allow outbound traffic for the. The network ACL that is associated with the subnet does not allow outbound traffic for the ephemeral port range. https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs-records-examples.html

Submitted by parkjh· Mar 30, 2026Networking and Content Delivery

Question

Application A runs on Amazon EC2 instances behind a Network Load Balancer (NLB). The EC2 instances are in an Auto Scaling group and are in the same subnet that is associated with the NLB. Other applications from an on-premises environment cannot communicate with Application A on port 8080. To troubleshoot the issue, a SysOps administrator analyzes the flow logs. The flow logs include the following records:

What is the reason for the rejected traffic?

Options

  • AThe security group of the EC2 instances has no Allow rule for the traffic from the NLB.
  • BThe security group of the NLB has no Allow rule for the traffic from the on-premises
  • CThe ACL of the on-premises environment does not allow traffic to the AWS environment.
  • DThe network ACL that is associated with the subnet does not allow outbound traffic for the

How the community answered

(31 responses)
  • A
    3% (1)
  • B
    10% (3)
  • C
    16% (5)
  • D
    71% (22)

Explanation

The network ACL that is associated with the subnet does not allow outbound traffic for the ephemeral port range. https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs-records-examples.html

Topics

#network ACL#NLB flow logs#outbound traffic rules#VPC troubleshooting

Community Discussion

No community discussion yet for this question.

Full SOA-C02 Practice