VPC Security Best Practices Quiz

What you'll be asked

1. Which component acts as a virtual firewall for your Amazon EC2 instances to control inbound and outbound traffic at the instance level?
2. You are designing a VPC with a public and private subnet. Where should you place your database instances to minimize their exposure to the public internet?
3. What is the primary difference between a Network ACL and a Security Group regarding statefulness?
4. When implementing a 'Defense in Depth' strategy for a web application, how should you configure your VPC security layers?
5. You have an application in a private subnet that requires occasional patches from a public repository. How can you provide this access while maintaining security?

Answers and explanations come after you submit.