DOP-C02 Question #341: Real Exam Question with Answer & Explanation

Question

A company uses an organization in AWS Organizations to manage its 500 AWS accounts. The organization has all features enabled. The AWS accounts are in a single OU. The developers need to use the CostCenter tag key for all resources in the organization's member accounts. Some teams do not use the CostCenter tag key to tag their Amazon EC2 instances. The cloud team wrote a script that scans all EC2 instances in the organization's member accounts. If the EC2 instances do not have a CostCenter tag key, the script will notify AWS account administrators. To avoid this notification, some developers use the CostCenter tag key with an arbitrary string in the tag value. The cloud team needs to ensure that all EC2 instances in the organization use a CostCenter tag key with the appropriate cost center value. Which solution will meet these requirements?

Options

• ACreate an SCP that prevents the creation of EC2 instances without the CostCenter tag key.
• BCreate an SCP that prevents the creation of EC2 instances without the CostCenter tag key.
• CCreate an SCP that prevents the creation of EC2 instances without the CostCenter tag key.
• DCreate a tag policy that requires the CostCenter tag to be values from a known list of cost centers