Security World 4 · Edge Shields · Stage 5

Zero Trust Door

An internal application reached without a VPN: who you are and what device you are on, checked on every request; and the way out checked by name.

  • AWS Verified Access
  • Trust providers
  • ALB authentication
  • Client VPN
  • Route 53 Resolver DNS Firewall
Domain
Security
World
Security World 4: Edge Shields (Specialty)
Game type
Solution board: Drop services into each row's slots, then run records through them.
Time
About 35 minutes on a first attempt (estimated)
Exam guides
  • SAA-C03Task 1.2: Design secure workloads and applications
  • SOA-C03Skill 5.1.3: Audit AWS network protection services in a single account
  • SCS-C03Skill 3.3.3: Determine and configure security workload requirements for communication between hybrid environments and AWS (for example, by using AWS Verified Access); Skill 3.3.1: Design and troubleshoot appropriate network controls to permit or prevent network traffic as required; Skill 5.1.2: Design and configure mechanisms for secure and private access to resources