Question 28

Explanation

In AWS, security groups are virtual firewalls that control inbound and outbound traffic to and from Amazon Elastic Compute Cloud (EC2) instances or other AWS resources. They act as a fundamental building block of network security, allowing you to define rules that specify which traffic is allowed or denied based on IP addresses, ports, and protocols. Amazon GuardDuty is an AWS service that is a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect AWS accounts and workloads. In AWS, Network Access Control Lists (Network ACLs or NACLs) are network-level security constructs that operate at the subnet level. They act as traffic filters, allowing you to define rules that control inbound and outbound traffic flow to and from subnets within a Virtual Private Cloud (VPC). Network ACLs provide an additional layer of security by permitting or denying traffic based on IP addresses, ports, and protocols, and they help protect your VPC's network traffic from unauthorized access. AWS Shield is an AWS service that provides managed Distributed Denial of Service (DDoS) protection, offering automatic safeguards to help protect your AWS applications from infrastructure and application-layer DDoS attacks that can lead to downtime and data loss. OBJ. 2.4 For support or reporting issues, include Question ID: 65078d1126d5842a1a55f95e in your ticket. Thank you.