AWS Certified Cloud Practitioner · Free Practice Question Medium
Question 22
- A They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic.
- B They are stateful.
- C They are stateless.
- D They operate at the instance level.
- E They evaluate all rules before allowing traffic.
Reveal correct answers
Correct answers: A, C
Explanation
Network ACLs in AWS are stateless, meaning they do not keep track of the state of a connection. Each packet is evaluated independently, without regard to the state of the traffic. Additionally, network ACLs process rules in order, starting with the lowest numbered rule, when deciding whether to allow or deny traffic. This means that the rules are evaluated sequentially, and once a rule matches the traffic, the corresponding action is taken, and no further rules are evaluated.A. Network ACLs in AWS process rules in order, starting with the lowest numbered rule, to determine whether to allow or deny traffic. This means that once a rule matches, the decision is made, and subsequent rules are not evaluated.
B. Network ACLs in AWS are stateless, meaning they do not keep track of the state of a connection. Each packet is evaluated independently, which is why they are not stateful. Therefore, the option stating they are stateful is incorrect.
C. Network ACLs in AWS are stateless, meaning they evaluate each request independently without maintaining any context or session information. This is why they do not automatically allow return traffic and require explicit rules for both inbound and outbound traffic.
D. Network ACLs do not operate at the instance level; they operate at the subnet level.
E. Network ACLs do not evaluate all rules before allowing traffic; instead, they process rules in order, starting with the lowest numbered rule, and stop evaluating once a rule matches.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
