ANS-C01 Network Security, Compliance and Governance Practice Question

A company wants to allow their employees to access internal web applications hosted on EC2 instances in a private subnet. The employees are outside the corporate network and connect via the internet. Which AWS service would provide secure, managed remote access without requiring a VPN client on each employee's device?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

AWS Application Load Balancer with AWS WAF and Cognito authentication

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
AWS Direct Connect
Why it's wrong here
Direct Connect is a dedicated network connection, not for remote user access.
✓
AWS Application Load Balancer with AWS WAF and Cognito authentication
Why this is correct
An ALB with Cognito user pools provides authentication and can be public-facing, allowing users to access internal apps via the internet with security controls.
✗
AWS Client VPN
Why it's wrong here
Client VPN requires a client application on each device.
✗
AWS Site-to-Site VPN
Why it's wrong here
Site-to-Site VPN connects entire networks, not individual users.

Visual reference

Go deeper

ANS-C01 Network Security, Compliance and Governance Practice Question

Why each option matters

Option-by-option breakdown

Related to this question