ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 782 - SAP-C01 discussion

Report
Export

A large company with hundreds of AWS accounts has a newly established centralized internal process for purchasing new or modifying existing Reserved Instances. This process requires all business units that want to purchase or modify Reserved Instances to submit requests to a dedicated team for procurement or execution. Previously, business units would directly purchase or modify Reserved Instances in their own respective AWS accounts autonomously. Which combination of steps should be taken to proactively enforce the new process in the MOST secure way possible? (Choose two.)

A.
Ensure all AWS accounts are part of an AWS Organizations structure operating in all features mode.
Answers
A.
Ensure all AWS accounts are part of an AWS Organizations structure operating in all features mode.
B.
Use AWS Config to report on the attachment of an IAM policy that denies access to the ec2:PurchaseReservedInstancesOffering and ec2:ModifyReservedInstances actions.
Answers
B.
Use AWS Config to report on the attachment of an IAM policy that denies access to the ec2:PurchaseReservedInstancesOffering and ec2:ModifyReservedInstances actions.
C.
In each AWS account, create an IAM policy with a DENY rule to the ec2:PurchaseReservedInstancesOffering and ec2:ModifyReservedInstances actions.
Answers
C.
In each AWS account, create an IAM policy with a DENY rule to the ec2:PurchaseReservedInstancesOffering and ec2:ModifyReservedInstances actions.
D.
Create an SCP that contains a deny rule to the ec2:PurchaseReservedInstancesOffering and ec2:ModifyReservedInstances actions. Attach the SCP to each organizational unit (OU) of the AWS Organizations structure.
Answers
D.
Create an SCP that contains a deny rule to the ec2:PurchaseReservedInstancesOffering and ec2:ModifyReservedInstances actions. Attach the SCP to each organizational unit (OU) of the AWS Organizations structure.
E.
Ensure that all AWS accounts are part of an AWS Organizations structure operating in consolidated billing features mode.
Answers
E.
Ensure that all AWS accounts are part of an AWS Organizations structure operating in consolidated billing features mode.
Suggested answer: C, E
asked 16/09/2024
Alexey Chernikov
32 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first