SCS-C02 Question #101: Real Exam Question with Answer & Explanation

Question

A company is using AWS Organizations to implement a multi-account strategy. The company does not have on-premises infrastructure. All workloads run on AWS. The company currently has eight member accounts. The company anticipates that it will have no more than 20 AWS accounts total at any time. The company issues a new security policy that contains the following requirements: - No AWS account should use a VPC within the AWS account for workloads. - The company should use a centrally managed VPC that all AWS accounts can access to launch workloads in subnets. - No AWS account should be able to modify another AWS account's application resources within the centrally managed VPC. - The centrally managed VPC should reside in an existing AWS account that is named Ac-count- A within an organization. The company uses an AWS CloudFormation template to create a VPC that contains multiple subnets in Account-A. This template exports the subnet IDs through the CloudFormation Outputs section. Which solution will complete the security setup to meet these requirements?

Options

• AUse a CloudFormation template in the member accounts to launch workloads. Configure the
• BUse a transit gateway in the VPC within Account-A. Configure the member accounts to use the
• CUse AWS Resource Access Manager (AWS RAM) to share Account-A's VPC subnets with the
• DCreate a peering connection between Account-A and the remaining member accounts. Configure