ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Solutions Architect - Professional SAP-C02 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Professional SAP-C02 exam
Go to Exam

Exam AWS Certified Solutions Architect - Professional SAP-C02 topic 1 question 441 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional SAP-C02
Question #: 441
Topic #: 1
[All AWS Certified Solutions Architect - Professional SAP-C02 Questions]

A company has multiple lines of business (LOBs) that roll up to the parent company. The company has asked its solutions architect to develop a solution with the following requirements:
• Produce a single AWS invoice for all of the AWS accounts used by its LOBs.
• The costs for each LOB account should be broken out on the invoice.
• Provide the ability to restrict services and features in the LOB accounts, as defined by the company's governance policy.
• Each LOB account should be delegated full administrator permissions, regardless of the governance policy.

Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)

  • A. Use AWS Organizations to create an organization in the parent account for each LOB. Then invite each LOB account to the appropriate organization.
  • B. Use AWS Organizations to create a single organization in the parent account. Then, invite each LOB's AWS account to join the organization.
  • C. Implement service quotas to define the services and features that are permitted and apply the quotas to each LOB. as appropriate.
  • D. Create an SCP that allows only approved services and features, then apply the policy to the LOB accounts.
  • E. Enable consolidated billing in the parent account's billing console and link the LOB accounts.
Show Suggested Answer Hide Answer
Suggested Answer: BD 🗳️
by duriselvan at Feb. 5, 2024, 5:07 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
7f6aef3
Highly Voted 12 months ago
Selected Answer: BD
E: Is wrong --> Consolidated billing is already enabled by default when you create an organization B: obvious D: since there are no OUs, I assume that the SCP applies to each LOB account
upvoted 14 times
...
chelbsik
Highly Voted 1 year, 2 months ago
Selected Answer: BE
I choose BE D conficts with the last requirement
upvoted 8 times
juanife
11 months, 1 week ago
I agree with you on that point
upvoted 1 times
...
e4bc18e
12 months ago
D does not conflict, they can be full administrators in their accounts but not have access to all services, one does not conflict with the other
upvoted 3 times
...
...
874def1
Most Recent 3 weeks ago
Selected Answer: BD
Can someone confirm if C is completely wrong? I dont think service quotas can be used to limit the usage of services in an account under an organization?
upvoted 1 times
...
PSPaul
4 months ago
Selected Answer: BD
This is a very interesting question. While the answer appears to be B + D, the solution could be further enhanced by including option E. However, given the question's emphasis on restricting services within each Line of Business (LOB), B + D likely represents the most suitable choice.
upvoted 1 times
...
PSPaul
4 months ago
Selected Answer: BD
It should be B and D But it's not really true. To have B + D +E together is perfect To response this question BD is would be ok
upvoted 1 times
...
pk0619
4 months, 1 week ago
Selected Answer: AD
If we choose E are we saying that we only enable Consolidated billing feature of Organization and not all features. Because then we cannot even use SCP ? D is not entirely correct as well - SCP are there to Deny and set perimeter, instead of allowing
upvoted 1 times
...
0b43291
5 months, 2 weeks ago
Selected Answer: BD
B. Use AWS Organizations to create a single organization in the parent account and invite each LOB's AWS account to join. This allows: - Producing a single invoice for all accounts (consolidated billing). - Breaking out costs for each LOB account. - Delegating full administrator permissions to LOB accounts (through SCPs). D. Create an SCP that allows only approved services and features based on the governance policy, and apply it to the LOB accounts. SCPs in AWS Organizations define rules for what services and resources can be used in member accounts. This restricts available services and features for LOB accounts while allowing full administrator permissions within defined boundaries.
upvoted 1 times
...
tgv
8 months, 2 weeks ago
Selected Answer: BD
B D D is required for governance
upvoted 1 times
...
zolthar_z
9 months ago
For SAP 01 version D and E were in the same option, so the answer is B - D+E
upvoted 2 times
...
trungtd
10 months, 3 weeks ago
Selected Answer: BD
B D because Consolidated billing is already enabled by default when you create an organization
upvoted 1 times
...
naylinu
11 months, 1 week ago
It should chose 3 ......... A + E . And D is require for governance
upvoted 1 times
naylinu
11 months, 1 week ago
Sorry B + E . And D is require for governance
upvoted 2 times
...
...
teo2157
11 months, 2 weeks ago
Selected Answer: BE
We have to read carefully the question, it says "Provide the ability to restrict services and features in the LOB accounts, as defined by the company's governance policy.", Organizations itself provide that ability but the question is not saying anything about to apply SCPs immediatelly to the OUs but just to have that ability. So for me D is discarded due to that.
upvoted 4 times
...
seetpt
1 year ago
Selected Answer: BE
BE for me
upvoted 2 times
...
bjexamprep
1 year ago
The number of answers can not satisfy the question objectives. “Produce a single AWS invoice for all of the AWS accounts used by its LOBs.” B “The costs for each LOB account should be broken out on the invoice.” E is trying to address this requirement, but has flaw. “Provide the ability to restrict services and features in the LOB accounts, as defined by the company's governance policy.” D, but the policy should be applied to OU instead of Account. “Each LOB account should be delegated full administrator permissions, regardless of the governance policy.” NO answer is addressing this requirement.
upvoted 2 times
...
Keval12345
1 year ago
Selected Answer: BD
I think there should bbe choose 3 options here. BDE
upvoted 3 times
...
VerRi
1 year, 1 month ago
Selected Answer: BE
It should be BE. D just clearly broke the requirement of "each LOB account should be delegated full administrator permissions, regardless of the governance policy.".
upvoted 4 times
...
djangoUnchained
1 year, 1 month ago
Could it be A, C? Service quotas is a terrible way of restricting features but it's the only one that satisfies the last 2 requirements.
upvoted 1 times
djangoUnchained
1 year, 1 month ago
Forget it, answer is BD. In the SCP you can grant an exception to not limit the admin accounts.
upvoted 2 times
...
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago