ExpertMedium1 markMultiple Choice
AWS SAP-C02 · Question 04 · Domain 1.4: Multi-Account Environment
A company is setting up a new multi-account environment. They want to automate the provisioning of new accounts with standardized security baselines, VPCs, and IAM roles. Which AWS service is BEST suited for this?
A company is setting up a new multi-account environment. They want to automate the provisioning of new accounts with standardized security baselines, VPCs, and IAM roles. Which AWS service is BEST suited for this?
Answer options:
A.
AWS CloudFormation StackSets
B.
AWS Control Tower
C.
AWS Systems Manager Automation
D.
AWS Service Catalog
How to approach this question
Identify the service designed specifically for setting up and governing a secure, multi-account environment.
Full Answer
B.AWS Control Tower✓ Correct
AWS Control Tower provides the easiest way to set up and govern a secure, multi-account AWS environment based on best practices.
Common mistakes
Choosing StackSets, which is a lower-level tool compared to Control Tower.
Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 1
75 questions · hints · full answers · grading
More questions from this exam
Q01An enterprise has 50 VPCs across two AWS Regions. They need to establish transitive routing betwe...HardQ02A company uses AWS Organizations. The security team wants to ensure that no IAM user or role can ...MediumQ03An application requires a relational database with an RPO of 1 second and an RTO of less than 1 m...HardQ05An organization wants to allocate AWS costs to specific business units. They use AWS Organization...HardQ06A development team wants to implement a CI/CD pipeline that deploys an application to Amazon ECS....Medium