nerdexam
Amazon

DOP-C02 · Question #208

A company uses an organization in AWS Organizations to manage several AWS accounts that the company's developers use. The company requires all data to be encrypted in transit. Multiple Amazon S3…

The correct answer is C. Turn on AWS Config for the organization. Deploy a conformance pack that uses the s3-bucket-. https://repost.aws/knowledge-center/s3-bucket-policy-for-config-rule

Submitted by asante_acc· Mar 6, 2026Security and Compliance

Question

A company uses an organization in AWS Organizations to manage several AWS accounts that the company's developers use. The company requires all data to be encrypted in transit. Multiple Amazon S3 buckets that were created in developer accounts allow unencrypted connections. A DevOps engineer must enforce encryption of data in transit for all existing S3 buckets that are created in accounts in the organization. Which solution will meet these requirements?

Options

  • AUse AWS CloudFormation StackSets to deploy an AWS Network Firewall firewall to each
  • BUse AWS CloudFormation StackSets to deploy an AWS Network Firewall firewall to each
  • CTurn on AWS Config for the organization. Deploy a conformance pack that uses the s3-bucket-
  • DTurn on AWS Config for the organization. Deploy a conformance pack that uses the s3-bucket-

How the community answered

(25 responses)
  • A
    24% (6)
  • B
    8% (2)
  • C
    56% (14)
  • D
    12% (3)

Explanation

https://repost.aws/knowledge-center/s3-bucket-policy-for-config-rule

Topics

#AWS Organizations#AWS Config Conformance Pack#S3 encryption in transit#compliance enforcement

Community Discussion

No community discussion yet for this question.

Full DOP-C02 Practice