exam questions

Exam AWS Certified Solutions Architect - Professional SAP-C02 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Professional SAP-C02 exam

Exam AWS Certified Solutions Architect - Professional SAP-C02 topic 1 question 441 discussion

A company has multiple lines of business (LOBs) that roll up to the parent company. The company has asked its solutions architect to develop a solution with the following requirements:
• Produce a single AWS invoice for all of the AWS accounts used by its LOBs.
• The costs for each LOB account should be broken out on the invoice.
• Provide the ability to restrict services and features in the LOB accounts, as defined by the company's governance policy.
• Each LOB account should be delegated full administrator permissions, regardless of the governance policy.

Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)

  • A. Use AWS Organizations to create an organization in the parent account for each LOB. Then invite each LOB account to the appropriate organization.
  • B. Use AWS Organizations to create a single organization in the parent account. Then, invite each LOB's AWS account to join the organization.
  • C. Implement service quotas to define the services and features that are permitted and apply the quotas to each LOB. as appropriate.
  • D. Create an SCP that allows only approved services and features, then apply the policy to the LOB accounts.
  • E. Enable consolidated billing in the parent account's billing console and link the LOB accounts.
Show Suggested Answer Hide Answer
Suggested Answer: BD 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
7f6aef3
Highly Voted 1 year, 1 month ago
Selected Answer: BD
E: Is wrong --> Consolidated billing is already enabled by default when you create an organization B: obvious D: since there are no OUs, I assume that the SCP applies to each LOB account
upvoted 14 times
...
chelbsik
Highly Voted 1 year, 3 months ago
Selected Answer: BE
I choose BE D conficts with the last requirement
upvoted 8 times
juanife
1 year ago
I agree with you on that point
upvoted 1 times
...
e4bc18e
1 year, 1 month ago
D does not conflict, they can be full administrators in their accounts but not have access to all services, one does not conflict with the other
upvoted 3 times
...
...
studybuddy12
Most Recent 2 weeks ago
Selected Answer: BD
Note - By default, the organization is created with all features enabled. You can also create the organization with only consolidated billing features enabled.
upvoted 1 times
...
studybuddy12
2 weeks ago
Selected Answer: BC
"Note By default, the organization is created with all features enabled. You can also create the organization with only consolidated billing features enabled."
upvoted 1 times
...
jimee11
1 month ago
Selected Answer: BD
The answer should be B, D, and E.
upvoted 1 times
jimee11
1 month ago
CORRECTION: B and D. Consolidated Billing done for you.
upvoted 1 times
...
...
874def1
2 months, 1 week ago
Selected Answer: BD
Can someone confirm if C is completely wrong? I dont think service quotas can be used to limit the usage of services in an account under an organization?
upvoted 1 times
...
PSPaul
5 months, 3 weeks ago
Selected Answer: BD
This is a very interesting question. While the answer appears to be B + D, the solution could be further enhanced by including option E. However, given the question's emphasis on restricting services within each Line of Business (LOB), B + D likely represents the most suitable choice.
upvoted 1 times
...
PSPaul
5 months, 3 weeks ago
Selected Answer: BD
It should be B and D But it's not really true. To have B + D +E together is perfect To response this question BD is would be ok
upvoted 1 times
...
pk0619
5 months, 3 weeks ago
Selected Answer: AD
If we choose E are we saying that we only enable Consolidated billing feature of Organization and not all features. Because then we cannot even use SCP ? D is not entirely correct as well - SCP are there to Deny and set perimeter, instead of allowing
upvoted 1 times
...
0b43291
7 months ago
Selected Answer: BD
B. Use AWS Organizations to create a single organization in the parent account and invite each LOB's AWS account to join. This allows: - Producing a single invoice for all accounts (consolidated billing). - Breaking out costs for each LOB account. - Delegating full administrator permissions to LOB accounts (through SCPs). D. Create an SCP that allows only approved services and features based on the governance policy, and apply it to the LOB accounts. SCPs in AWS Organizations define rules for what services and resources can be used in member accounts. This restricts available services and features for LOB accounts while allowing full administrator permissions within defined boundaries.
upvoted 1 times
...
tgv
10 months ago
Selected Answer: BD
B D D is required for governance
upvoted 1 times
...
zolthar_z
10 months, 2 weeks ago
For SAP 01 version D and E were in the same option, so the answer is B - D+E
upvoted 2 times
...
trungtd
1 year ago
Selected Answer: BD
B D because Consolidated billing is already enabled by default when you create an organization
upvoted 1 times
...
naylinu
1 year ago
It should chose 3 ......... A + E . And D is require for governance
upvoted 1 times
naylinu
1 year ago
Sorry B + E . And D is require for governance
upvoted 2 times
...
...
teo2157
1 year ago
Selected Answer: BE
We have to read carefully the question, it says "Provide the ability to restrict services and features in the LOB accounts, as defined by the company's governance policy.", Organizations itself provide that ability but the question is not saying anything about to apply SCPs immediatelly to the OUs but just to have that ability. So for me D is discarded due to that.
upvoted 4 times
...
seetpt
1 year, 1 month ago
Selected Answer: BE
BE for me
upvoted 2 times
...
bjexamprep
1 year, 2 months ago
The number of answers can not satisfy the question objectives. “Produce a single AWS invoice for all of the AWS accounts used by its LOBs.” B “The costs for each LOB account should be broken out on the invoice.” E is trying to address this requirement, but has flaw. “Provide the ability to restrict services and features in the LOB accounts, as defined by the company's governance policy.” D, but the policy should be applied to OU instead of Account. “Each LOB account should be delegated full administrator permissions, regardless of the governance policy.” NO answer is addressing this requirement.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...