DOP-C02 Question 98

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  ption B is the most appropriate solution because it leverages AWS Config conformance packs, which are purpose-built for applying and managing AWS Config rules across multiple accounts. Deploying the conformance pack from the central management account using CloudFormation StackSets ensures that the security policy is applied uniformly across all accounts in the organization, and it restricts non-administrator users from modifying the baseline.

• 1

  The question says 'The policy must require all current and future AWS member accounts to use a common baseline of AWS Config rules' Does D account for that?

• Chose D5

  D is correct: <a common baseline of AWS Config rule> means conformance pack. <a member account as a delegated administrator account for AWS Config> means delegated admin A and C: no mentionf of conformance pack B: should deploy this using AWS config and in the delegated account, not the management account