AWS Certified Cloud Practitioner — Question 161

A company needs to apply security rules to specific Amazon EC2 instances.

Which AWS service or feature provides this functionality?

Answer options

• A. AWS WAF
• B. Network ACLs
• C. Amazon VPC
• D. Security groups

Correct answer: D

Explanation

Security groups are specifically designed to control inbound and outbound traffic to Amazon EC2 instances, making them the appropriate choice for applying security rules. While AWS WAF protects web applications, Network ACLs provide a subnet-level security layer, and Amazon VPC is used for creating virtual networks but does not directly apply security rules to individual instances.