Quiz 1: Timed Mode Diagnostic Test – AWS Certified DevOps Engineer Professional

[Vinod4b9]

A company is enforcing a compliance policy that restricts the operation of its AWS resources to specific regions within the Asia Pacific. One of its DevOps engineers was instructed to come up with a solution that sends an alert to the admin if an activity occurs outside the Asia Pacific. Also, the solution must be applied automatically to new Regions that will be launched in the future.

In the above question Nowhere It was mentioned that this account is using AWS organizations , But the correct answer option E says Attach a service control policy to the organization root that allows operations from approved regions and denies access to non-global services on regions outside the Asia Pacific.

without even mentioning about AWS organizations we can’t say using SCP is valid here, Eithet update the question or option pls

• This discussion was modified 3 years, 1 month ago by  Vinod4b9.

[Carlo-TutorialsDojo]

Hello Vinod,

Thanks for you sharing your thoughts.

This is a good example of a question that is rather ambiguous (in the sense that it doesn’t explain the scenario in full detail) that may come up in the actual exam. I’m not saying you’re wrong because it is indeed true that an AWS Organizations should be established first before you can create SCPs. In these types of questions, you must carefully evaluate the items (which you masterfully did since you were able to know what’s possible and not) and picking the answer/s that makes the most sense for the scenario.

There are certain levels of ambiguity in the exam that we are trying to replicate in our practice tests to give our users a good impression of what to expect. And this question is an example of that.

Please let me know if there’s anything I can help you with.

Regards,

Carlo @ Tutorials Dojo