AWS - Security Groups and Network ACLsWhich statement correctly describes how NACLs handle return traffic?AReturn traffic must be explicitly allowed by outbound rules.BReturn traffic is automatically allowed by default.CReturn traffic is blocked unless a security group allows it.DReturn traffic is only allowed if it matches the inbound rule.Check Answer
Step-by-Step SolutionSolution:Step 1: Recall NACL statelessnessNACLs do not remember previous packets, so return traffic is not automatically allowed.Step 2: Understand outbound rule necessityReturn traffic must have an explicit outbound rule to be allowed through the NACL.Final Answer:Return traffic must be explicitly allowed by outbound rules. -> Option AQuick Check:Return traffic requires outbound rule = true [OK]Quick Trick: Return traffic needs outbound rule, no auto-allow [OK]Common Mistakes:Assuming return traffic is auto-allowedConfusing NACLs with stateful firewallsIgnoring outbound rules for return packets
Master "Security Groups and Network ACLs" in AWS9 interactive learning modes - each teaches the same concept differentlyLearnWhyDeepVisualTryChallengeProjectRecallTime
More AWS Quizzes AWS Account and Billing - Resource tagging for cost tracking - Quiz 8hard AWS CLI - CLI output formats (json, table, text) - Quiz 13medium EC2 Fundamentals - Launching an EC2 instance - Quiz 11easy Identity and Access Management - IAM users and groups - Quiz 13medium Identity and Access Management - IAM policies (JSON structure) - Quiz 2easy Identity and Access Management - IAM users and groups - Quiz 6medium S3 Fundamentals - S3 storage classes (Standard, IA, Glacier) - Quiz 10hard Security Groups and Network ACLs - Security groups vs NACLs decision - Quiz 6medium VPC Fundamentals - VPC peering concept - Quiz 15hard VPC Fundamentals - Route tables configuration - Quiz 5medium