nerdexam
Amazon

DOP-C02 · Question #16

DOP-C02 Question #16: Real Exam Question with Answer & Explanation

Sign in or unlock DOP-C02 to reveal the answer and full explanation for question #16. The question stem and answer options stay visible for context.

Submitted by layla.eg· Mar 6, 2026Security & Compliance

Question

A company uses AWS Organizations to manage multiple accounts. Information security policies require that all unencrypted Amazon EBS volumes be marked as non-compliant. A DevOps engineer needs to automatically deploy the solution and ensure that this compliance check is always present. Which solution will accomplish this?

Options

  • ACreate an AWS CloudFormation template that defines an AWS Inspector rule to check whether
  • BCreate an AWS Config organizational rule to check whether EBS encryption is enabled and
  • CCreate an SCP in Organizations. Set the policy to prevent the launch of Amazon EC2 instances
  • DDeploy an IAM role to all accounts from a single trusted account. Build a pipeline with AWS

Unlock DOP-C02 to see the answer

You've previewed enough free DOP-C02 questions. Unlock DOP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#AWS Config#Organizational Rules#EBS Encryption#Compliance Management
Full DOP-C02 Practice