nerdexam
AmazonAmazon

SAP-C02 · Question #602

SAP-C02 Question #602: Real Exam Question with Answer & Explanation

Sign in or unlock SAP-C02 to reveal the answer and full explanation for question #602. The question stem and answer options stay visible for context.

Submitted by neha2k· Mar 6, 2026Continuous Improvement for Existing Solutions

Question

A company runs applications in hundreds of production AWS accounts. The company uses AWS Organizations with all features enabled and has a centralized backup operation that uses AWS Backup. The company is concerned about ransomware attacks. To address this concern, the company has created a new policy that all backups must be resilient to breaches of privileged-user credentials in any production account. Which combination of steps will meet this new requirement? (Choose three.)

Options

  • AImplement cross-account backup with AWS Backup vaults in designated non-production
  • BAdd an SCP that restricts the modification of AWS Backup vaults.
  • CImplement least privilege access for the IAM service role that is assigned to AWS Backup.
  • DConfigure the backup frequency, lifecycle, and retention period to ensure that at least one backup
  • EConfigure AWS Backup to write all backups to an Amazon S3 bucket in a designated non-

Unlock SAP-C02 to see the answer

You've previewed enough free SAP-C02 questions. Unlock SAP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full SAP-C02 PracticeBrowse All SAP-C02 Questions