SAA-C03 Question 419

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose AC2

  Answer will be A&C. AWS does not currently provide a direct setting at the organization level to enforce default EBS encryption across all member accounts in AWS Organizations. However, you can achieve this goal by implementing default encryption at the account level and enforcing compliance using an SCP (Service Control Policy).

• Chose CE1

  C and E as shaded by guru4cloud

• 2

  The problem here is we don't know in which account the workload is on. The account in ap-xx-is that the management account or it's a member account?? That will decide to select either A or E. C is certainly correct