✓ Correct answer: D. Security groups<a target="_blank" href="https://www.bing.com/aclick?ld=e86ns1BXUKxOqC12wno4QM7zVUCUxFxCkVSzlpCGKPTw7gOpC2OQ8CwOPmuxKsVjqHvqd76tBdqhoBKF-DuTEkVCrALAWRuQDzt1TU-iEmT5dBtyQAkZqW_ZiTLgz5arvhGnyHbQ8HEpwO0f96vMzvm69X0Ygb2wAzzZtkeP_DJ4wCgT3XLh_0GMGvdUThJwR3agDV4WHOVdE3mW5HVVIYD1DShts_ej5S3BP4U2jYm_QuUyS0-kIuhEg6YDE9oH1OQNapyM44toat-sX7-1rl8r_gy2E&u=aHR0cHMlM2ElMmYlMmZhd3MuYW1hem9uLmNvbSUyZmZyZWUlMmYlM2ZhbGwtZnJlZS10aWVyLnNvcnQtYnklM2RpdGVtLmFkZGl0aW9uYWxGaWVsZHMuU29ydFJhbmslMjZhbGwtZnJlZS10aWVyLnNvcnQtb3JkZXIlM2Rhc2MlMjZhd3NmLkZyZWUlMjUyMFRpZXIlMjUyMFR5cGVzJTNkKmFsbCUyNmF3c2YuRnJlZSUyNTIwVGllciUyNTIwQ2F0ZWdvcmllcyUzZGNhdGVnb3JpZXMlMjUyM2NvbXB1dGUlMjZ0cmslM2RiNTI4YWY3NC02NDUzLTQ4ZmMtYjVlMy00ZDBmZjU3ZDFmMjMlMjZzY19jaGFubmVsJTNkcHMlMjZzX2t3Y2lkJTNkQUwhNDQyMiExMCE3MTk0OTUyMDEyMDEwMCE3MTk1MDA0Mjk2MzAwNyUyNmVmX2lkJTNkZmE0MTQzN2EyZDNkMTgxMzViY2YyNjAyMzIxNjNhMTYlM2FHJTNhcw&rlid=fa41437a2d3d18135bcf260232163a16">Security groups and network ACLs are two AWS services that can be used to block network traffic to an instance. Security groups are virtual firewalls that control the inbound and outbound traffic for your instances at the instance level. You can specify which protocols, ports, and source or destination IP addresses are allowed or denied for each instance.Security groups are stateful, which means that they automatically allow return traffic for any allowed inbound or outbound traffic123. Network ACLs are virtual firewalls that control the inbound and outbound traffic for your subnets at the subnet level. You can create rules to allow or deny traffic based on protocols, ports, and source or destination IP addresses.Network ACLs are stateless, which means that you have to explicitly allow return traffic for any allowed inbound or outbound traffic456.
Keep practising. Use the free AWS PDF, watch the YouTube walkthrough, or unlock all 10 web questions with timed mock exams.
Free practice here. Timed mocks when you are ready.
Study the AWS Exam Prep 2026 Test free question explanations, download the PDF, then unlock timed mock exams on the web when you want exam-day practice.
Theory