Study. uk . com
  1. Home
  2. All questions
  3. Question 27

AWS Certified Solutions Architect study material · question 27 of 500

Which two statements correctly describe network ACLs in a VPC? Choose two.

  1. Network ACLs are stateful, like security groups
  2. Every subnet is associated with a network ACL, defaulting to the VPC's default one
  3. A network ACL rule carries a number and either allows or denies traffic
  4. A subnet can be associated with several network ACLs at once
Show the answer

Answer: B. Every subnet is associated with a network ACL, defaulting to the VPC's default one
C. A network ACL rule carries a number and either allows or denies traffic

A subnet always has exactly one network ACL, and each numbered rule allows or denies. Attaching a new ACL replaces the previous association.

Source: Control subnet traffic with network access control lists (Amazon Web Services) — Network ACL associations

Challenge yourself on this topic → Study as cards