DOP-C02 · Question #199
A DevOps engineer is implementing governance controls for a company that requires its infrastructure to be housed within the United States. The engineer must restrict which AWS Regions can be used, an
Sign in or unlock DOP-C02 to reveal the answer and full explanation for question #199. The question stem and answer options stay visible for context.
Question
A DevOps engineer is implementing governance controls for a company that requires its infrastructure to be housed within the United States. The engineer must restrict which AWS Regions can be used, and ensure an alert is sent as soon as possible if any activity outside the governance policy takes place. The controls should be automatically enabled on any new Region outside the United States (US). Which combination of actions will meet these requirements? (Choose two.)
Options
- ACreate an AWS Organizations SCP that denies access to all non-global services in non-US
- BConfigure AWS CloudTrail to send logs to Amazon CloudWatch Logs and enable it for all
- CUse an AWS Lambda function that checks for AWS service activity and deploy it to all Regions.
- DUse an AWS Lambda function to query Amazon Inspector to look for service activity in non-US
- EWrite an SCP using the aws:RequestedRegion condition key limiting access to US Regions.
Unlock DOP-C02 to see the answer
You've previewed enough free DOP-C02 questions. Unlock DOP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.