AWS Certified Solutions Architect Professional · Free Practice Question Medium
Question 6
A company has an organization in AWS Organizations. The company is using AWS Control Tower to deploy a landing zone for the organization. The company wants to implement governance and policy enforcement. The company must implement a policy that will detect Amazon RDS DB instances that are not encrypted at rest in the company’s production OU. Which solution will meet this requirement?
- A Turn on mandatory guardrails in AWS Control Tower. Apply the mandatory guardrails to the production OU.
- B Enable the appropriate guardrail from the list of strongly recommended guardrails in AWS Control Tower. Apply the guardrail to the production OU.
- C Use AWS Config to create a new mandatory guardrail. Apply the rule to all accounts in the production OU.
- D Create a custom SCP in AWS Control Tower. Apply the SCP to the production OU.
Reveal correct answer
Correct answer: B
Explanation
The company should enable the appropriate guardrail from the list of strongly recommended guardrails in AWS Control Tower and apply it to the production OU. This solution will ensure that Amazon RDS DB instances that are not encrypted at rest are detected, thereby implementing the required governance and policy enforcement.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
