Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Solutions Architect - Professional · AWS
Select 3 answers.
This question asks for 3 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Pick Control Tower when you see “built‑in blueprints and guardrails.” Do it in the management account, organize Prod/Dev OUs, and enroll/invite existing accounts. Attach the EBS‑encryption guardrail to the Production OU so it covers current and future prod accounts only.
I mean E is technically correct. The guardrail is created FROM the management account in Control Tower. Even tho I would select F as well during the exam
I thought so too sooo decided to let AI take a wack at it... it said Guardrails in Control Tower are applied to OUs, not “from the management account” in an ad-hoc way. The wording is off: you don’t create a “guardrail from the management account” that hits everything; you attach guardrails to specific OUs