Match each AWS networking concept to its definition.
Drag a concept onto its matching description — or click a concept then click the description.
Virtual private cloud isolated network
Segment of VPC IP address range
Stateful firewall for instances
Stateless firewall for subnets
Enables VPC to internet communication
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
VPC: A virtual network dedicated to your AWS account.
Networking fundamentals for AWS: VPC is a virtual network, subnets are subdivisions, security groups are instance-level firewalls, and NACLs are subnet-level stateless firewalls.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
VPC: A virtual network dedicated to your AWS account.
Why this is correct
This is the correct definition of a Virtual Private Cloud (VPC).
Subnet: A segment of a VPC's IP address range where you place resources.
Why this is correct
This correctly describes a subnet as a subdivision within a VPC.
Security Group: A virtual firewall that controls inbound and outbound traffic at the instance level.
Why this is correct
Security groups are stateful and operate at the instance level.
NACL: A stateless firewall that controls inbound and outbound traffic at the subnet level.
Why this is correct
Network ACLs are stateless and operate at the subnet level.
Security Group: A stateless firewall that controls traffic at the subnet level.
Why it's wrong here
Incorrect — this describes a Network ACL (NACL), not a Security Group.
NACL: A virtual firewall that controls traffic at the instance level.
Why it's wrong here
Incorrect — this describes a Security Group, not a NACL.
Visual reference
Go deeper
About these practice questions
This DEA-C01 question is part of Courseiva's 1,711-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DEA-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DEA-C01 exam.