Correct Answer: An optional layer of security for your VPC subnets that acts as a firewall
NACLs operate at the subnet level, providing a second layer of defense after security groups....
Correct Answer
An optional layer of security for your VPC subnets that acts as a firewall
Why This Answer Is Correct
NACLs operate at the subnet level, providing a second layer of defense after security groups.
This question evaluates your knowledge of Network ACLs — a core concept tested in AWS Certified Cloud Practitioner (CLF-C02). Understanding Network ACLs is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You need to explicitly deny traffic from a specific IP address to your Amazon EC2 instances. Can Security Groups natively handle explicit deny rules?
You need stateless firewall rules at the subnet level in your Amazon VPC. What should you configure?
Are Network ACLs 'Stateful' or 'Stateless'?
What is the primary difference between a Security Group and a Network ACL?
What is the 'Rule Number' used for in a Network ACL?