Exam AWS Certified Cloud Practitioner topic 1 question 306 discussion

stateless = NACL stateful = Security Group

C. Network access control list (ACL) https://medium.com/awesome-cloud/aws-difference-between-security-groups-and-network-acls-adc632ea29ae "Security group is the firewall of EC2 Instances. Network ACL is the firewall of the VPC Subnets." "Security groups are tied to an instance whereas Network ACLs are tied to the subnet." "Security groups are stateful. Network ACLs are stateless. "

AWS Network Access Control Lists (ACLs) are used to provide stateless filtering for the inbound and outbound traffic of a VPC subnet. They act as a virtual firewall for controlling traffic at the subnet level. ACLs evaluate rules in a specific order, and each rule is stateless, meaning that it doesn't track the state of the traffic like a stateful firewall would.

C is the answer.

C: Network ACLs are stateless, which means that responses to allowed inbound traffic are subject to the rules for outbound traffic (and vice versa).

Answer C. NSG Stateful, NACL Stateless.

stateless ACLs stateful Security Group