An organization wants to implement 'Zero Trust' networking for its developers to access internal admin panels hosted on EC2. They want to avoid a traditional VPN and instead use identity-based access with MFA. Which AWS service is best?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: AWS Verified Access

AWS Verified Access (recently launched) provides secure remote access without a VPN, evaluating every request based on identity (via IAM Identity Center) and device state....

📋Part of AWS Certified Solutions Architect – Professional (SAP-C02) · AWS Certification Practice
Real Exam ScenarioAmazon VPC

An organization wants to implement 'Zero Trust' networking for its developers to access internal admin panels hosted on EC2. They want to avoid a traditional VPN and instead use identity-based access with MFA. Which AWS service is best?

✓ Correct Answer & ExplanationAmazon VPC

Correct Answer

AWS Verified Access

Why This Answer Is Correct

AWS Verified Access (recently launched) provides secure remote access without a VPN, evaluating every request based on identity (via IAM Identity Center) and device state.

📚 What This Question Tests

This question evaluates your knowledge of Amazon VPC — a core concept tested in AWS Certified Solutions Architect – Professional (SAP-C02). Understanding Amazon VPC is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.