SAP-C02 · Question #172
SAP-C02 Question #172: Real Exam Question with Answer & Explanation
Sign in or unlock SAP-C02 to reveal the answer and full explanation for question #172. The question stem and answer options stay visible for context.
Question
A company wants to allow its Marketing team to perform SQL queries on customer records to identify market segments. The data is spread across hundreds of files. The records must be encrypted in transit and at rest. The Team Manager must have the ability to manage users and groups, but no team members should have access to services or resources not required for the SQL queries. Additionally, Administrators need to audit the queries made and receive notifications when a query violates rules defined by the Security team. AWS Organizations has been used to create a new account and an AWS IAM user with administrator permissions for the Team Manager. Which design meets these requirements?
Options
- AApply a service control policy (SCP) that allows access to IAM, Amazon RDS, and AWS
- BApply a service control policy (SCP) that denies access to all services except IAM, Amazon
- CApply a service control policy (SCP) that denies access to all services except IAM, Amazon
- DApply a service control policy (SCP) that allows access to IAM, Amazon Athena, Amazon S3, and
Unlock SAP-C02 to see the answer
You've previewed enough free SAP-C02 questions. Unlock SAP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.