Because subnets must be in a public space to allow users to connect from home.
Because subnet sizes determine the billing rate for the entire VPC.
Because AWS does not allow subnet CIDR blocks to be resized after they are created.
Because larger subnets are required to enable Multi-Factor Authentication (MFA).
Standard Edition, because it is the most cost-effective for a large number of users.
Simple AD, because it is the easiest to configure for a large number of WorkSpaces.
AD Connector, because it provides the best performance by connecting to on-premises servers.
Enterprise Edition, because it is the only version that supports multi-region replication.
To inspect traffic for malicious content using its built-in App-ID engine.
To provide high availability and load balancing for the Palo Alto firewall fleet.
To assign User-IDs to network packets based on Active Directory group membership.
To encrypt all traffic between the WorkSpaces and the internet.
Direct Connect
NAT Gateway
VPC Peering
AWS Transit Gateway
user authentication policy
network access control list
custom bundle
True
False
SAML 2.0 Integration
Palo Alto User-ID
AWS Systems Manager (SSM)
Direct RADIUS Integration
Protocol: PCoIP; Tool: Amazon GuardDuty
Protocol: WSP; Tool: CloudTrail
Protocol: PCoIP; Tool: CloudWatch
Protocol: WSP; Tool: Network Health Check
Amazon CloudWatch
Amazon GuardDuty
WorkSpaces Inventory
AWS CloudTrail
By using AWS Systems Manager to delete the data from the local computer.
By using AWS KMS to encrypt the user's local hard drive.
By configuring a NAT Gateway to filter clipboard traffic.
By applying a Group Policy Object (GPO) to the WorkSpaces directory to disable clipboard redirection.
It forces all users to update their WorkSpace client application simultaneously.
It encrypts the image using two different KMS keys for added security.
It automatically reduces the cost of all WorkSpaces by 50% during the update.
It allows IT to test a new image with a small pilot group of users before rolling it out to the entire firm.
It automatically converts WorkSpaces between monthly and hourly billing based on user activity.
It bundles all WorkSpaces data transfer charges into a single, discounted monthly fee.
It deletes WorkSpaces that have not been used for more than 30 days.
It automatically downsizes the CPU and RAM of underutilized WorkSpaces.
All done? Get your grade