AWS Certified Cloud Practitioner CLF-C02Demo

By Amazon · Question Mode

QuestionQ653

Content Domain 3: Cloud Technology and Services

A company runs many Amazon EC2 instances in its VPC. The company wants to use a native AWS security resource to control network traffic between certain EC2 instances.

Which AWS service or feature will meet this requirement?

  • A Network ACLs
  • B AWS WAF
  • C Amazon GuardDuty
  • D Security groups
Explanation

Security groups function as instance-level virtual firewalls that control inbound and outbound traffic for specific EC2 instances. They allow fine-grained control between certain instances. Network ACLs operate at the subnet level for broader traffic filtering, not instance-specific control.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!