Exam AWS Certified Cloud Practitioner topic 1 question 42 discussion

https://docs.aws.amazon.com/vpc/latest/userguide/vpc-network-acls.html Network ACLs are stateless, which means that responses to allowed inbound traffic are subject to the rules for outbound traffic (and vice versa). Rules are evaluated starting with the lowest numbered rule. As soon as a rule matches traffic, it's applied regardless of any higher-numbered rule that might contradict it.

Options A&D . NACL can be understood as the firewall or protection for the subnet. Security group can be understood as a firewall to protect EC2 instances. These are stateless, meaning any change applied to an incoming rule isn't automatically applied to an outgoing rule per https://www.knowledgehut.com/tutorials/aws/nacl-vs-security-groups

They are stateless and They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic

why A ?i think c more realistic

A. They are stateless: Network ACLs in AWS are stateless, meaning they do not keep track of the state of a connection. Each incoming and outgoing packet is evaluated independently based on the rules defined in the ACL. D. They process rules in order, starting with the lowest numbered rule when deciding whether to allow traffic: Network ACLs evaluate rules sequentially and process them in order, starting with the lowest numbered rule. Once a matching rule is found, processing stops, and the decision to allow or deny traffic is made based on that rule. No further rules are evaluated.

A and D

A and D

A. They are stateless. D. They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic.

A. They are stateless. Most Voted D. They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic. Most Voted

A. They are stateless. D. They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic.

Options A&D

i choose AD

The correct answers are A and D. A) They are stateless: Network ACLs (Access Control Lists) in AWS are stateless. They evaluate each network packet independently and don't track the state of the traffic flow. Therefore, any changes to the traffic flow require explicit rules for each direction of traffic. D) They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic: AWS Network ACLs process the rules in sequential order starting with the lowest numbered rule to the highest numbered rule to decide whether to allow traffic or not

C and D.

A - B - no. SGs are stateful C - no. they do this in order D - E - no. SGs operate at instance level A & D

A and D, just as regular ACLs

Option A&D