Amazon DOP-C02 Exam - Topic 1 Question 6 Discussion

Actual exam question for Amazon's DOP-C02 exam

Question #: 6
Topic #: 1

A company has chosen AWS to host a new application. The company needs to implement a multi-account strategy. A DevOps engineer creates a new AWS account and an organization in AWS Organizations. The DevOps engineer also creates the OU structure for the organization and sets up a landing zone by using AWS Control Tower.

The DevOps engineer must implement a solution that automatically deploys resources for new accounts that users create through AWS Control Tower Account Factory. When a user creates a new account, the solution must apply AWS CloudFormation templates and SCPs that are customized for the OU or the account to automatically deploy all the resources that are attached to the account. All the OUs are enrolled in AWS Control Tower.

Which solution will meet these requirements in the MOST automated way?

AUse AWS Service Catalog with AWS Control Tower. Create portfolios and products in AWS Service Catalog. Grant granular permissions to provision these resources. Deploy SCPs by using the AWS CLI and JSON documents.

BDeploy CloudFormation stack sets by using the required templates. Enable automatic deployment. Deploy stack instances to the required accounts. Deploy a CloudFormation stack set to the organization's management account to deploy SCPs.

CCreate an Amazon EventBridge rule to detect the CreateManagedAccount event. Configure AWS Service Catalog as the target to deploy resources to any new accounts. Deploy SCPs by using the AWS CLI and JSON documents.

DDeploy the Customizations for AWS Control Tower (CfCT) solution. Use an AWS CodeCommit repository as the source. In the repository, create a custom package that includes the CloudFormation templates and the SCP JSON documents.

Show Suggested Answer

Suggested Answer: D

by Viva at Apr 21, 2023, 01:59 AM

Limited Time Offer

25%

Off

Get Premium DOP-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Remedios

4 months ago

A is interesting, but I think it adds unnecessary complexity.

upvoted 0 times

...

Alline

4 months ago

Wait, can you really automate SCPs with B? That sounds too good to be true!

upvoted 0 times

...

Stefania

4 months ago

D could work too, but it feels a bit manual compared to B.

upvoted 0 times

...

Curt

4 months ago

I agree, B is definitely the way to go!

upvoted 0 times

...

Cornell

4 months ago

B seems like the most automated option for deploying resources.

upvoted 0 times

...

Alecia

5 months ago

I feel like the Customizations for AWS Control Tower option is the most comprehensive. We went over it in class, and it seemed to cover all bases for deploying resources automatically.

upvoted 0 times

...

Kimberlie

5 months ago

I’m a bit confused about the EventBridge rule option. I know it can trigger actions, but would it really handle the deployment of SCPs effectively?

upvoted 0 times

...

Izetta

5 months ago

I think deploying CloudFormation stack sets could be a solid approach. We practiced a similar question about managing resources across accounts, and stack sets seemed effective.

upvoted 0 times

...

Margot

5 months ago

I remember discussing how AWS Control Tower can help with governance, but I'm not sure if Service Catalog is the best fit for this automation requirement.

upvoted 0 times

...

Vicente

5 months ago

Ah, I've got it! The answer is A, anticipatory breach. That's when a party indicates they won't perform their obligations, even before the time for performance arrives. Definitely the right choice for this question.

upvoted 0 times

...

Ligia

5 months ago

Ah, I remember learning about diflunisal in my pharmacology class. If I recall correctly, it's an NSAID, so it would likely be used to treat inflammatory conditions like rheumatoid arthritis. I'll go with that.

upvoted 0 times

...

Caprice

5 months ago

I remember discussing that a level 1 and level 2 router can still have an up neighbor relationship. Wasn't that in one of our practice questions?

upvoted 0 times

...

Francesco

5 months ago

Okay, let me see. The question is asking about the documented instructions for responding to and reporting security violations. I think the answer is B, Security Incident Procedures.

upvoted 0 times

...