exam questions

Exam AWS Certified Cloud Practitioner CLF-C02 All Questions

View all questions & answers for the AWS Certified Cloud Practitioner CLF-C02 exam

Exam AWS Certified Cloud Practitioner CLF-C02 topic 1 question 291 discussion

Which of the following are features of network ACLs as they are used in the AWS Cloud? (Choose two.)

  • A. They are stateless.
  • B. They are stateful.
  • C. They evaluate all rules before allowing traffic.
  • D. They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic.
  • E. They operate at the instance level.
Show Suggested Answer Hide Answer
Suggested Answer: AD 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
ShaiTay
5 months, 2 weeks ago
Selected Answer: AD
A. They are stateless. D. They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic.
upvoted 1 times
...
chalaka
1 year ago
Selected Answer: AD
A. They are stateless: Network ACLs do not maintain connection state information. Each packet is evaluated independently based on the rules defined in the ACL. D. They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic: Network ACLs evaluate rules sequentially from the lowest numbered rule to the highest numbered rule. Once a rule that matches the traffic is found, further rule processing stops.
upvoted 4 times
...
stoy123
1 year, 2 months ago
Selected Answer: AD
A, D. Another crap question
upvoted 1 times
...
luchonana11
1 year, 3 months ago
Selected Answer: AD
INSTANCE LEVEL IS SECURITY GROUP
upvoted 2 times
...
BShelat
1 year, 3 months ago
Selected Answer: AD
https://docs.aws.amazon.com/vpc/latest/userguide/vpc-network-acls.html
upvoted 1 times
...
petercorn
1 year, 3 months ago
Selected Answer: AD
Rule number. Rules are evaluated starting with the lowest numbered rule. As soon as a rule matches traffic, it's applied regardless of any higher-numbered rule that might contradict it. NACLs are stateless, which means that information about previously sent or received traffic is not saved. https://docs.aws.amazon.com/vpc/latest/userguide/vpc-network-acls.html
upvoted 3 times
...
Aghajee
1 year, 3 months ago
A. They are stateless. D. They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic. Explanation: A. Network ACLs (Access Control Lists) in AWS are stateless, meaning they do not keep track of the state of established connections. Each rule in a network ACL is applied independently of the others. D. Network ACLs process rules in order, starting with the lowest numbered rule. Once a rule is matched, no further rules are evaluated, which makes the order of rules important. The other options are not correct.
upvoted 4 times
...
Tony_99_08
1 year, 3 months ago
Selected Answer: AD
Network ACLs are stateless, meaning each packet is processed individually regardless of any previous packets, and they evaluate rules sequentially, starting from the lowest numbered rule.
upvoted 3 times
...
Lyn
1 year, 3 months ago
Answer : AD
upvoted 1 times
...
bab5fb1
1 year, 3 months ago
Selected Answer: CD
correct answer CD
upvoted 2 times
BShelat
1 year, 3 months ago
They do not evaluate all rules before allowing traffic. They evaluate the rules in order, starting with the lowest numbered rule, when deciding whether allow or deny traffic. If the traffic matches a rule, the rule is applied and then they do not evaluate any additional rules. SO "C" can NOT be a correct answer. https://docs.aws.amazon.com/vpc/latest/userguide/vpc-network-acls.html
upvoted 2 times
...
...
Mike1987
1 year, 4 months ago
Selected Answer: AD
should be A and D
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago