SAP-C02 Practice Test

Question 1 of 5

Single choice

A company runs 40 AWS accounts under AWS Organizations. The security team must guarantee that no member account can disable AWS CloudTrail, even when an account administrator holds full IAM permissions. Which approach meets this requirement?

Choose one answer

A. Create an IAM permissions boundary in each account that denies CloudTrail changes to all roles
B. Enable AWS Config rules in every account to detect CloudTrail changes
C. Attach a service control policy that denies CloudTrail changes to the organization root
D. Remove the IAM administrator role from all member accounts

Choose an answer or reveal it to continue.

Keyboard shortcuts:A to D or 1 to 4answerEntercheck the answer←→previous or nextFflag for review

SAP-C02AWS Certified Solutions Architect - Professionalpractice test