Examtopics

AWS Certified Security - Specialty
  • Topic 1 Question 261

    A company runs an application on a fleet of Amazon EC2 instances behind an Application Load Balancer (ALB). A security engineer needs to provide secure access to the application without requiring the use of a VPN. Users should be able to access the application only when they meet specific security conditions, including a defined device posture.

    Which solution will meet these requirements?

    • Create an AWS WAF web ACL. Configure a custom response to block traffic that does not align with the defined device posture.

    • Configure AWS Verified Access. Add the application by creating an endpoint for the ALB.

    • Configure Amazon Verified Permissions. Use a policy-based access control (PBAC) policy to perform authorization.

    • Configure Amazon Verified Permissions. Add the application by creating an endpoint for the ALB.


    シャッフルモード