AWS Certified SysOps Administrator – Associate (legacy) — Question 480

Your VPC automatically comes with a modifiable default network ACL, which by default _____.

Answer options

• A. blocks outbound traffic
• B. allows only inbound traffic
• C. allows all inbound and outbound traffic
• D. blocks all inbound and outbound traffic

Correct answer: C

Explanation

The default network ACL associated with a newly created VPC is preconfigured to allow all inbound and outbound traffic. In contrast, any custom network ACLs you create will block all traffic by default until you explicitly define allow rules.