A company needs to inspect all outbound traffic from their VPC to the internet. They want to implement stateful domain name (FQDN) filtering to ensure instances can only access approved external APIs. Which service provides this capability?

Answer options:

NAT Gateway

Security Groups

AWS Network Firewall

AWS WAF

How to approach this question

Identify the need for outbound FQDN filtering. Network Firewall is the managed service for this.

Full Answer

C.AWS Network Firewall✓ Correct

AWS Network Firewall is a managed service that makes it easy to deploy essential network protections for all of your VPCs, including stateful inspection and domain name (FQDN) filtering for outbound traffic.

Common mistakes

Thinking Security Groups can filter by domain name.

Question 16 All questions Question 18

Practice the full AWS SAA-C03 Practice Exam 3

65 questions · hints · full answers · grading

More questions from this exam

Q01A company stores sensitive documents in an Amazon S3 bucket. The security team requires that only...Easy Q02A large enterprise uses AWS Organizations to manage multiple accounts. The security team wants to...Medium Q03A company hosts a web application on Amazon EC2 instances behind an Application Load Balancer (AL...Easy Q04A company wants to continuously monitor its AWS accounts for malicious activity and unauthorized ...Medium Q05A company needs to encrypt data at rest in Amazon RDS and manage database credentials securely. T...Medium

View all 65 questions →