SAP-C02 · Question #377
A company wants to migrate to AWS. The company wants to use a multi-account structure with centrally managed access to all accounts and applications. The company also wants to keep the traffic on a pr
Sign in or unlock SAP-C02 to reveal the answer and full explanation for question #377. The question stem and answer options stay visible for context.
Question
A company wants to migrate to AWS. The company wants to use a multi-account structure with centrally managed access to all accounts and applications. The company also wants to keep the traffic on a private network. Multi-factor authentication (MFA) is required at login, and specific roles are assigned to user groups. The company must create separate accounts for development, staging, production, and shared network. The production account and the shared network account must have connectivity to all accounts. The development account and the staging account must have access only to each other. Which combination of steps should a solutions architect take to meet these requirements? (Choose three.)
Options
- ADeploy a landing zone environment by using AWS Control Tower. Enroll accounts and invite
- BEnable AWS Security Hub in all accounts to manage cross-account access. Collect findings
- CCreate transit gateways and transit gateway VPC attachments in each account. Configure
- DSet up and enable AWS IAM Identity Center (AWS Single Sign-On). Create appropriate
- EEnable AWS Control Tower in all Recounts to manage routing between accounts. Collect findings
- FCreate IAM users and groups. Configure MFA for all users. Set up Amazon Cognito user pools
Unlock SAP-C02 to see the answer
You've previewed enough free SAP-C02 questions. Unlock SAP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.