Correct Answer: NACLs evaluate rules in numerical order; Security Groups evaluate all rules and allow if there's a match
Network ACLs process rules starting from the lowest number, while Security Groups aggregate all rules (implicit 'deny' for anything not matched)....
Correct Answer
NACLs evaluate rules in numerical order; Security Groups evaluate all rules and allow if there's a match
Why This Answer Is Correct
Network ACLs process rules starting from the lowest number, while Security Groups aggregate all rules (implicit 'deny' for anything not matched).
This question evaluates your knowledge of Security Groups — a core concept tested in AWS Certified Solutions Architect – Associate (SAA-C03). Understanding Security Groups is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You need stateful firewall rules at the Amazon EC2 instance level. What should you configure?
Which statement correctly describes the nature of Security Groups in AWS?
An architect needs to block a specific IP address that is launching a DDoS attack on the web servers. Where should this block be implemented?
A security group is associated with an EC2 instance. The group has an inbound rule allowing port 80 (HTTP) from 0.0.0.0/0. What happens to the outbound traffic from the instance on port 80?
In a sophisticated tiered architecture, how should a database security group be configured to be most secure?