SAP-C02 Question #536: Real Exam Question with Answer & Explanation

Question

A company wants to optimize AWS data-transfer costs and compute costs across developer accounts within the company's organization in AWS Organizations. Developers can configure VPCs and launch Amazon EC2 instances in a single AWS Region. The EC2 instances retrieve approximately 1 TB of data each day from Amazon S3. The developer activity leads to excessive monthly data-transfer charges and NAT gateway processing charges between EC2 instances and S3 buckets, along with high compute costs. The company wants to proactively enforce approved architectural patterns for any EC2 instance and VPC infrastructure that developers deploy within the AWS accounts. The company does not want this enforcement to negatively affect the speed at which the developers can perform their tasks. Which solution will meet these requirements MOST cost-effectively?

Options

• ACreate SCPs to prevent developers from launching unapproved EC2 instance types. Provide the
• BCreate a daily forecasted budget with AWS Budgets to monitor EC2 compute costs and S3 data-
• CCreate an AWS Service Catalog portfolio that users can use to create an approved VPC
• DCreate and deploy AWS Config rules to monitor the compliance of EC2 and VPC resources in the