DOP-C02 · Question #237
DOP-C02 Question #237: Real Exam Question with Answer & Explanation
The correct answer is B: Create an AWS Control Tower landing zone. Configure OUs and appropriate controls in AWS. https://docs.aws.amazon.com/controltower/latest/userguide/controls.html
Question
A company has started using AWS across several teams. Each team has multiple accounts and unique security profiles. The company manages the accounts in an organization in AWS Organizations. Each account has its own configuration and security controls. The company's DevOps team wants to use preventive and detective controls to govern all accounts. The DevOps team needs to ensure the security of accounts now and in the future as the company creates new accounts in the organization. Which solution will meet these requirements?
Options
- AUse Organizations to create OUs that have appropriate SCPs attached for each team. Place
- BCreate an AWS Control Tower landing zone. Configure OUs and appropriate controls in AWS
- CCreate AWS CloudFormation stack sets in the organization's management account. Configure a
- DConfigure AWS Config to manage the AWS Config rules across all AWS accounts in the
Explanation
https://docs.aws.amazon.com/controltower/latest/userguide/controls.html
Topics
Community Discussion
No community discussion yet for this question.