nerdexam
AmazonAmazon

DOP-C02 · Question #302

DOP-C02 Question #302: Real Exam Question with Answer & Explanation

Sign in or unlock DOP-C02 to reveal the answer and full explanation for question #302. The question stem and answer options stay visible for context.

Submitted by lucia.co· Mar 6, 2026Security and Compliance

Question

A large company recently acquired a small company. The large company invited the small company to join the large company's existing organization in AWS Organizations as a new OU. A DevOps engineer determines that the small company needs to launch t3.small Amazon EC2 instance types for the company's application workloads. The small company needs to deploy the instances only within US-based AWS Regions. The DevOps engineer needs to use an SCP in the small company's new OU to ensure that the small company can launch only the required instance types. Which solution will meet these requirements?

Options

  • AConfigure a statement to deny the ec2:RunInstances action for all EC2 instance resources when
  • BConfigure a statement to allow the ec2:RunInstances action for all EC2 instance resources when
  • CConfigure a statement to deny the ec2:RunInstances action for all EC2 instance resources when
  • DConfigure a statement to allow the ec2:RunInstances action for all EC2 instance resources when

Unlock DOP-C02 to see the answer

You've previewed enough free DOP-C02 questions. Unlock DOP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#AWS Organizations#Service Control Policies (SCPs)#IAM conditions#EC2 instance types#Regional restrictions
Full DOP-C02 PracticeBrowse All DOP-C02 Questions