AWS Certified Cloud Practitioner — Question 209

A company needs stateless network filtering for its VPC.
Which AWS service, tool, or feature will meet this requirement?

Answer options

• A. AWS PrivateLink
• B. Security group
• C. Network access control list (ACL)
• D. AWS WAF

Correct answer: C

Explanation

The correct answer is C, Network access control list (ACL), because ACLs provide a stateless method of filtering traffic at the subnet level. Options A (AWS PrivateLink) and D (AWS WAF) do not offer stateless filtering capabilities, while B (Security group) provides stateful filtering, which is not what the question specifies.