Exam AWS Certified Cloud Practitioner topic 1 question 100 discussion

Network ACL >>> Subnet level Security Groups >>>> Instance level

Option B - Network ACL

Network ACL

B. Network ACL

B. Network ACL

A Network ACL is a feature of Amazon Virtual Private Cloud (VPC) that acts as a firewall at the subnet level. It is an optional layer of security that controls inbound and outbound traffic at the subnet level. A Network ACL operates at the protocol and port level and uses numbered rules to allow or deny traffic. By default, a Network ACL allows all inbound and outbound traffic.

B. Network ACL

subnet so answer is b,if instance choose C

B is the answer.

The right answer is B

The security groups is a firewalling solution at instance level. The right answer is B.

Answer is B

The key is SUBNET LEVEL

Vote for B

The answer is B....."A network access control list (ACL) allows or denies specific inbound or outbound traffic at the SUBNET LEVEL"

Keyword here is subnet, therefore the correct answer is B: Network ACL

NACL is at subnet level, security group at the EC2 instance level