AWS Certified Security - Specialty

AWS Certified Security - Specialty

Get started today

Ultimate access to all questions.


You are responsible for implementing network security controls in a VPC that hosts a web application. The application requires strict access controls and the ability to monitor all inbound and outbound traffic. Which combination of AWS services would you use to achieve this?




Explanation:

Network ACLs provide stateless packet filtering at the subnet level, which can be used to enforce strict access controls. VPC Flow Logs allow you to capture information about the IP traffic going to and from network interfaces in your VPC, providing comprehensive monitoring capabilities.