Correct Answer: Network ACL (using a Deny rule)
Security Groups do not support 'Deny' rules. To block a specific IP, you must use a Network ACL....
Correct Answer
Network ACL (using a Deny rule)
Why This Answer Is Correct
Security Groups do not support 'Deny' rules. To block a specific IP, you must use a Network ACL.
This question evaluates your knowledge of Security Groups — a core concept tested in AWS Certified Solutions Architect – Associate (SAA-C03). Understanding Security Groups is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You need stateful firewall rules at the Amazon EC2 instance level. What should you configure?
Which statement correctly describes the nature of Security Groups in AWS?
How do Network ACLs differ from Security Groups in terms of rule evaluation?
A security group is associated with an EC2 instance. The group has an inbound rule allowing port 80 (HTTP) from 0.0.0.0/0. What happens to the outbound traffic from the instance on port 80?
In a sophisticated tiered architecture, how should a database security group be configured to be most secure?