Task Statement 2.2: Deploy Automation to Create, Onboard, and Secure AWS Accounts in a Multi-Account or multi-Region Environment. DOP-C02 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which approach is commonly used to automate the creation and configuration of AWS accounts in a standardized way?

   • AUsing AWS Support to create accounts on demand
   • BManually creating each account through the AWS Management Console
   • CUsing AWS CloudFormation to define account resources as code
   • DUsing AWS Config to automatically create accounts
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following data sources does Amazon Detective use to create a graph of resource interactions?

   • AAmazon Route 53 DNS records
   • BAWS Cost Explorer data
   • CAWS CloudTrail logs
   • DAmazon S3 object contents
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary purpose of Amazon GuardDuty?

   • ATo continuously monitor for malicious activity and unauthorized behavior
   • BTo manage network access control lists (NACLs)
   • CTo provide a backup solution for EC2 instances
   • DTo create and manage IAM policies
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is a feature of AWS Organizations that helps centrally manage multiple AWS accounts?

   • AAutomatic backup of all resources in member accounts
   • BBuilt-in DDoS protection for all accounts
   • CConsolidated billing for all member accounts
   • DAutomatic creation of IAM users for each account
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company has a multi-account AWS Organization and wants to provide its employees with single sign-on access to all AWS accounts using their corporate credentials. They also want to enforce multi-factor authentication (MFA) for all users. Which solution should they use?

   • AUse AWS IAM Identity Center (SSO) to connect to the corporate identity provider and create permission sets that grant access to accounts, with MFA enforced by the IdP.
   • BUse AWS Organizations to create a cross-account role that users can assume with their corporate credentials.
   • CUse AWS Control Tower to automatically create IAM users in all accounts with the same password.
   • DCreate IAM users in each account and configure MFA for each user.
   Reveal Solution Discussion Select an answer first