Topic 1 Question 709
2 つ選択A company has an organization in AWS Organizations. The company runs Amazon EC2 instances across four AWS accounts in the root organizational unit (OU). There are three nonproduction accounts and one production account. The company wants to prohibit users from launching EC2 instances of a certain size in the nonproduction accounts. The company has created a service control policy (SCP) to deny access to launch instances that use the prohibited types.
Which solutions to deploy the SCP will meet these requirements?
Attach the SCP to the root OU for the organization.
Attach the SCP to the three nonproduction Organizations member accounts.
Attach the SCP to the Organizations management account.
Create an OU for the production account. Attach the SCP to the OU. Move the production member account into the new OU.
Create an OU for the required accounts. Attach the SCP to the OU. Move the nonproduction member accounts into the new OU.
ユーザの投票
コメント(8)
- 正解だと思う選択肢: BE
My vote is for BE
👍 12anikolov2024/02/07 - 正解だと思う選択肢: BE
I think it's B (directly attach) and E (attach via OU).
👍 6mestule2024/02/06 - 正解だと思う選択肢: BE
Only the non-prods need to be limited.
👍 4sandordini2024/04/25
シャッフルモード