AWS Certified Cloud Practitioner — Question 202

A company provides Amazon Workspaces to its remote employees. The company wants to prevent employees from using their virtual desktops to visit specific websites that are known to be malicious.

Which AWS service should the company use to meet this requirement?

Answer options

• A. AWS Shield Advanced
• B. Amazon Route 53
• C. Amazon GuardDuty
• D. AWS Network Firewall

Correct answer: D

Explanation

AWS Network Firewall is designed to provide network traffic filtering, making it suitable for blocking access to malicious websites. The other options, such as AWS Shield Advanced and Amazon GuardDuty, focus on different security aspects like DDoS protection and threat detection, respectively, which do not directly address the requirement of blocking specific website access.