DOP-C02 · Question #236
DOP-C02 Question #236: Real Exam Question with Answer & Explanation
Sign in or unlock DOP-C02 to reveal the answer and full explanation for question #236. The question stem and answer options stay visible for context.
Question
A company manages multiple AWS accounts by using AWS Organizations with OUs for the different business divisions. The company is updating their corporate network to use new IP address ranges. The company has 10 Amazon S3 buckets in different AWS accounts. The S3 buckets store reports for the different divisions. The S3 bucket configurations allow only private corporate network IP addresses to access the S3 buckets. A DevOps engineer needs to change the range of IP addresses that have permission to access the contents of the S3 buckets. The DevOps engineer also needs to revoke the permissions of two OUs in the company. Which solution will meet these requirements?
Options
- ACreate a new SCP that has two statements, one that allows access to the new range of IP
- BCreate a new SCP that has a statement that allows only the new range of IP addresses to access
- COn all the S3 buckets, configure resource-based policies that allow only the new range of IP
- DOn all the S3 buckets, configure resource-based policies that allow only the new range of IP
Unlock DOP-C02 to see the answer
You've previewed enough free DOP-C02 questions. Unlock DOP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.