Which of the following are features of network ACLs as they are used in the AWS Cloud?
(Choose two.)
They are stateless.
They are stateful.
They evaluate all rules before allowing traffic.
They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic.
They operate at the instance level.
Explanations:
Network ACLs (NACLs) in AWS are stateless, meaning they do not maintain a connection state. Each request is evaluated independently, and responses to allowed requests must also be explicitly allowed.
NACLs are stateless, not stateful. Unlike stateful firewalls, which track the state of active connections, NACLs require separate rules for both incoming and outgoing traffic.
NACLs do not evaluate all rules before allowing traffic; they process rules in order and stop at the first rule that matches the traffic.
NACLs process rules in order, starting with the lowest numbered rule. The first rule that matches the traffic determines whether it is allowed or denied.
NACLs operate at the subnet level, not the instance level. They control traffic in and out of subnets, while security groups operate at the instance level.
I have a feeling that the answer is:
They are stateless.