SAP-C02 · Question #4
SAP-C02 Question #4: Real Exam Question with Answer & Explanation
Sign in or unlock SAP-C02 to reveal the answer and full explanation for question #4. The question stem and answer options stay visible for context.
Question
A company is running a web application on Amazon EC2 instances in a production AWS account. The company requires all logs generated from the web application to be copied to a central AWS account for analysis and archiving. The company's AWS accounts are currently managed independently. Logging agents are configured on the EC2 instances to upload the tog files to an Amazon S3 bucket in the central AWS account. A solutions architect needs to provide access for a solution that will allow the production account to store log files in the central account. The central account also needs to have read access to the tog files. What should the solutions architect do to meet these requirements?
Options
- ACreate a cross-account role in the central account. Assume the role from the production account
- BCreate a policy on the S3 bucket with the production account ID as the principal. Allow S3 access
- CCreate a policy on the S3 bucket with access from only the CIDR range of the EC2 instances in
- DCreate a cross-account role in the production account. Assume the role from the production
Unlock SAP-C02 to see the answer
You've previewed enough free SAP-C02 questions. Unlock SAP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.