exam questions

Exam AWS Certified Solutions Architect - Professional All Questions

View all questions & answers for the AWS Certified Solutions Architect - Professional exam

Exam AWS Certified Solutions Architect - Professional topic 1 question 675 discussion

A company has multiple lines of business (LOBs) that roll up to the parent company. The company has asked its solutions architect to develop a solution with the following requirements:
✑ Produce a single AWS invoice for all of the AWS accounts used by its LOBs.
✑ The costs for each LOB account should be broken out on the invoice.
✑ Provide the ability to restrict services and features in the LOB accounts, as defined by the company's governance policy.
✑ Each LOB account should be delegated full administrator permissions, regardless of the governance policy.
Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)

  • A. Use AWS Organizations to create an organization in the parent account for each LOB. Then, invite each LOB account to the appropriate organization.
  • B. Use AWS Organizations to create a single organization in the parent account. Then, invite each LOB's AWS account to pin the organization.
  • C. Implement service quotas to define the services and features that are permitted and apply the quotas to each LOB as appropriate.
  • D. Create an SCP that allows only approved services and features, then apply the policy to the LOB accounts. Enable consolidated billing in the parent account's billing console and link the LOB accounts.
Show Suggested Answer Hide Answer
Suggested Answer: BD 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
keos
Highly Voted 3 years, 8 months ago
BD, most likely
upvoted 24 times
...
Ebi
Highly Voted 3 years, 7 months ago
BD is my choice
upvoted 6 times
...
gnic
Most Recent 2 years, 9 months ago
Selected Answer: BD
BD is the right question
upvoted 1 times
...
Dohecadi
3 years, 3 months ago
Selected Answer: BD
Choice is between A and B for Organizations, and A is wrong. You cannot belong to more than one organization. For permissions, coice is between C and D, and C is wrong. SCP is right.
upvoted 3 times
...
Buggie
3 years, 5 months ago
SCP can be applied to OU. NO other choice. hence A and D
upvoted 1 times
...
cldy
3 years, 6 months ago
B. Use AWS Organizations to create a single organization in the parent account. Then, invite each LOBג€™s AWS account to pin the organization. D. Create an SCP that allows only approved services and features, then apply the policy to the LOB accounts. Enable consolidated billing in the parent accountג€™s billing console and link the LOB accounts.
upvoted 2 times
...
AzureDP900
3 years, 6 months ago
B, D is right
upvoted 1 times
...
acloudguru
3 years, 6 months ago
Selected Answer: BD
C is not right, should be BD.
upvoted 2 times
...
acloudguru
3 years, 6 months ago
A rare simple question, BD hope I can have it in my exam
upvoted 1 times
...
andylogan
3 years, 7 months ago
It's B D
upvoted 1 times
...
wakame
3 years, 7 months ago
Not B This question says "Produce a single AWS invoice for all of the AWS accounts used by its LOBs." and consolidated billing put together billing for accounts in an organization. So B is wrong. The answer is A and D.
upvoted 1 times
wakame
3 years, 7 months ago
I made a mistake. consolidated billing put together billing for accounts in an organization so The answer is BD.
upvoted 1 times
...
...
DerekKey
3 years, 7 months ago
A wrong - correct but adds additional management overhead later. In this scenario we must assure: ability to restrict services and features in the LOB accounts, as defined by the company's governance policy. Same policy/restrictions for all. B correct - and more suited to this case (simplification of management) C wrong - quotas D correct E wrong - billing is by default. The other option is full features meaning billing and management. Btw. if you start with billing you can go up but this is one way process.
upvoted 1 times
...
tgv
3 years, 7 months ago
BBB DDD ---
upvoted 1 times
...
blackgamer
3 years, 7 months ago
BD but weird question.
upvoted 1 times
...
WhyIronMan
3 years, 7 months ago
I'll go with B,D
upvoted 1 times
...
digimaniac
3 years, 7 months ago
Can someone comment on "Each LOB account should be delegated full administrator permissions, regardless of the governance policy." I think only A can satisfy this one.
upvoted 3 times
DerekKey
3 years, 7 months ago
it doesn't matter if you have one org or many orgs. The process of registering delegated account uses account it and service principal. It means that this procedure works directly on an account.
upvoted 1 times
...
...
Waiweng
3 years, 7 months ago
it's B,D
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...