You need to set up security for your VPC and you know that Amazon VPC provides two features that you can use to increase security for your VPC: Security groups and network access control lists (ACLs). You start to look into security groups first. Which statement below is incorrect in relation to security groups?
A) Are stateful: Return traffic is automatically allowed, regardless of any rules.
B) Support addition of individual allow and deny rules in both inbound and outbound.
C) Security Groups can be added or removed from EC2 instances in a VPC at any time.
D) Evaluate all rules before deciding whether to allow traffic.

Question

Quizplus · Accepted Answer

Security groups only support allow rules; they do not support deny rules.

You Need to Set Up Security for Your VPC and You