Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Cloud Practitioner · AWS
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Shield → Protects from DDoS WAF → Protects web applications (SQL injections, etc) Network ACL → Protects the subnet (IPs) Security Group → Protects the instance (Instance ports)
A. Allow access to an Amazon EC2 instance through only a specific port.
https://docs.aws.amazon.com/vpc/latest/userguide/vpc-security-groups.html Security groups are stateful. For example, if you send a request from an instance, the response traffic for that request is allowed to reach the instance regardless of the inbound security group rules. Responses to allowed inbound traffic are allowed to leave the instance, regardless of the outbound rules. So "D" is NOT the answer. "A" is the correct answer.