SCS-C02 Question #2: Real Exam Question with Answer & Explanation

Question

A company uses AWS Organizations to manage a multi-account AWS environment in a single AWS Region. The organization's management account is named management-01. The company has turned on AWS Config in all accounts in the organization. The company has designated an account named security-01 as the delegated administrator for AWS Config. All accounts report the compliance status of each account's rules to the AWS Config delegated administrator account by using an AWS Config aggregator. Each account administrator can configure and manage the account's own AWS Config rules to handle each account's unique compliance requirements. A security engineer needs to implement a solution to automatically deploy a set of 10 AWS Config rules to all existing and future AWS accounts in the organization. The solution must turn on AWS Config automatically during account creation. Which combination of steps will meet these requirements? (Choose two.)

Options

• ACreate an AWS CloudFormation template that contains the 10 required AWS Config rules. Deploy
• BCreate a conformance pack that contains the 10 required AWS Config rules. Deploy the
• CCreate a conformance pack that contains the 10 required AWS Config rules. Deploy the
• DCreate an AWS CloudFormation template that will activate AWS Config. Deploy the template by
• ECreate an AWS CloudFormation template that will activate AWS Config. Deploy the template by