nerdexam
Amazon

SAP-C02 · Question #242

A company wants to use Amazon WorkSpaces in combination with the client devices to replace aging desktops. Employees use the desktops to access applications that work with clinical trial data…

The correct answer is A. Create an IP access control group rule with the list of public addresses from the branch offices. Amazon WorkSpaces allows you to control which IP addresses your WorkSpaces can be accessed from. By using IP address-based control groups, you can define and manage groups of trusted IP addresses, and only allow users to access their WorkSpaces when they're connected to a…

Submitted by kavita_s· Mar 6, 2026Design for New Solutions

Question

A company wants to use Amazon WorkSpaces in combination with the client devices to replace aging desktops. Employees use the desktops to access applications that work with clinical trial data. Corporate security policy states that access to the applications must be restricted to only company branch office locations. The company is considering adding an additional branch in the next 6 months. Which solution meets these requirements with the Most operational efficiency?

Options

  • ACreate an IP access control group rule with the list of public addresses from the branch offices.
  • BUse AWS Firewall Manager to create a web ACL rule with an IPSET with the list of public
  • CUSE AWS Certificate Manager (ACM) to issue trusted device certificates to the machine deployed
  • DCreate a custom WorkSpaces image with Windows Firewall configured to restrict configured

How the community answered

(49 responses)
  • A
    71% (35)
  • B
    8% (4)
  • C
    14% (7)
  • D
    6% (3)

Explanation

Amazon WorkSpaces allows you to control which IP addresses your WorkSpaces can be accessed from. By using IP address-based control groups, you can define and manage groups of trusted IP addresses, and only allow users to access their WorkSpaces when they're connected to a trusted network. An IP access control group acts as a virtual firewall that controls the IP addresses from which users are allowed to access their WorkSpaces. To specify the CIDR address ranges, add rules to your IP access control group, and then associate the group with your directory. You can associate each IP access control group with one or more directories. You can create up to 100 IP access control groups per Region per AWS account. However, you can only associate up to 25 IP access control groups with a single directory. https://docs.aws.amazon.com/workspaces/latest/adminguide/amazon-workspaces-ip-access- control-groups.html

Community Discussion

No community discussion yet for this question.

Full SAP-C02 Practice