Where can Service Control Policies (SCPs) be applied in an AWS Organization?

To the organization root, OUs, or individual accounts

In AWS Organizations, what is the purpose of an organizational unit (OU)?

To group accounts into logical containers for applying policies and simplifying management

To provide a separate login for each business unit

To automatically replicate data between accounts in the same OU

To create a separate billing entity for each OU

What is the primary purpose of AWS Service Catalog?

To create and manage a portfolio of approved IT services that users can provision

To monitor the performance of EC2 instances

To manage IAM roles for cross-account access

To provide a backup solution for RDS databases

A company is restructuring its AWS Organization and wants to apply different security policies to its development and production accounts. They have created two OUs: 'Dev' and 'Prod'. What is the most effective way to apply different SCPs to these OUs?

Create separate AWS Organizations for Dev and Prod accounts.

Attach a specific SCP to each OU, with the Prod SCP being more restrictive than the Dev SCP.

Use AWS Control Tower guardrails instead of SCPs to enforce different policies.

Attach the same SCP to both OUs and rely on IAM policies to differentiate permissions.

AWSCertified DevOps Engineer - Professional

Domain 2Objective 2

Task Statement 2.2: Deploy Automation to Create, Onboard, and Secure AWS Accounts in a Multi-Account or multi-Region Environment. DOP-C02 Practice Questions (Page 5)

Part of the Content Domain 2: Configuration Management and IaC domain, which accounts for 17% of the DOP-C02 exam. AWS does not publish an official question count, but from its 180-minute exam (~70–120 total, ~12–20 in this domain), expect 4–7 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

12concepts

17%of the exam

12 Concepts in This Objective

AWS account structures and best practices
AWS Organizations for account management
AWS Control Tower for account provisioning
Automating account provisioning and configuration
IAM for multi-account access
Service Control Policies (SCPs)
Governance and security controls at scale
AWS Config for compliance and auditing
AWS Security Hub for centralized security
Amazon GuardDuty for threat detection
Amazon Detective for security investigation
AWS Service Catalog for standardized provisioning

Questions 21–25

21foundation · easy
Where can Service Control Policies (SCPs) be applied in an AWS Organization?
Select an answer first
22foundation · easy
In AWS Organizations, what is the purpose of an organizational unit (OU)?
Select an answer first
23foundation · easy
What is the primary purpose of AWS Service Catalog?
Select an answer first
24foundation · easy
Which AWS service is used to aggregate security findings from multiple accounts and services into a single dashboard?
Select an answer first
25application · medium
A company is restructuring its AWS Organization and wants to apply different security policies to its development and production accounts. They have created two OUs: 'Dev' and 'Prod'. What is the most effective way to apply different SCPs to these OUs?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DOP-C02

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “DOP-C02” is a trademark of its owner, used for identification only.