SAP-C02 · Question #435
A company has a few AWS accounts for development and wants to move its production application to AWS. The company needs to enforce Amazon Elastic Block Store (Amazon EBS) encryption at rest current…
The correct answer is C. Create a new AWS Control Tower landing zone in the company's management account. Add D. Invite existing accounts to join the organization in AWS Organizations. Create SCPs to ensure F. Create a guardrail for the production OU to detect EBS encryption. https://docs.aws.amazon.com/controltower/latest/userguide/controls.html https://docs.aws.amazon.com/controltower/latest/userguide/strongly-recommended- controls.html#ebs-enable-encryption
Question
A company has a few AWS accounts for development and wants to move its production application to AWS. The company needs to enforce Amazon Elastic Block Store (Amazon EBS) encryption at rest current production accounts and future production accounts only. The company needs a solution that includes built-in blueprints and guardrails. Which combination of steps will meet these requirements? (Choose three.)
Options
- AUse AWS CloudFormation StackSets to deploy AWS Config rules on production accounts.
- BCreate a new AWS Control Tower landing zone in an existing developer account. Create OUs for
- CCreate a new AWS Control Tower landing zone in the company's management account. Add
- DInvite existing accounts to join the organization in AWS Organizations. Create SCPs to ensure
- ECreate a guardrail from the management account to detect EBS encryption.
- FCreate a guardrail for the production OU to detect EBS encryption.
How the community answered
(51 responses)- A31% (16)
- B18% (9)
- C43% (22)
- E8% (4)
Explanation
https://docs.aws.amazon.com/controltower/latest/userguide/controls.html https://docs.aws.amazon.com/controltower/latest/userguide/strongly-recommended- controls.html#ebs-enable-encryption
Community Discussion
No community discussion yet for this question.