SAP-C02 · Question #151
SAP-C02 Question #151: Real Exam Question with Answer & Explanation
Sign in or unlock SAP-C02 to reveal the answer and full explanation for question #151. The question stem and answer options stay visible for context.
Question
A company manages multiple AWS accounts by using AWS Organizations. Under the root OU. the company has two OUs: Research and DataOps. Because of regulatory requirements, all resources that the company deploys in the organization must reside in the ap-northeast-1 Region. Additionally, EC2 instances that the company deploys in the DataOps OU must use a predefined list of instance types. A solutions architect must implement a solution that applies these restrictions. The solution must maximize operational efficiency and must minimize ongoing maintenance. Which combination of steps will meet these requirements? (Select TWO )
Options
- ACreate an IAM role in one account under the DataOps OU.
- BCreate an IAM user in all accounts under the root OU.
- CCreate an SCP Use the aws:RequestedRegion condition key to restrict access to all AWS
- DCreate an SCP Use the ec2 Region condition key to restrict access to all AWS Regions except
- ECreate an SCP Use the ec2:lnstanceType condition key to restrict access to specific instance
Unlock SAP-C02 to see the answer
You've previewed enough free SAP-C02 questions. Unlock SAP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.