Correct Answer: Security Groups and Network ACLs
Network ACLs and Security Groups are the primary VPC components used to whitelist or block specific CIDR ranges, providing layered network security control at the subnet and instan...
Correct Answer
Security Groups and Network ACLs
Why This Answer Is Correct
Network ACLs and Security Groups are the primary VPC components used to whitelist or block specific CIDR ranges, providing layered network security control at the subnet and instance levels.
This question evaluates your knowledge of Scenario Based — a core concept tested in AWS Certified Cloud Practitioner (CLF-C02). Understanding Scenario Based is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You are building a photo-sharing application. You need a place to store millions of small JPEG files cheaply, and a way to automatically create a thumbnail when a new photo is uploaded. Which combination is best?
An organization wants to move their on-premises Microsoft SQL Server database to AWS but wants to minimize the operational burden of patching and backups. What should they use?
A global company needs to ensure that their web application's users in Tokyo and New York experience the lowest possible latency for static assets (CSS/JS). What should they implement?
You need to run a high-performance computing (HPC) workload that requires high-speed, low-latency communication between EC2 instances. Which placement strategy should you choose?
A healthcare startup needs to store patient records for 10 years to comply with regulations. The records are rarely accessed but must be available within a few hours if requested. What is the most cost-effective storage class?