SOA-C02 Domain 4: Security and Compliance

Operations reports a need to apply SCPs to prevent disabling CloudTrail. What is the MOST operationally efficient solution? apply SCPs to prevent disabling CloudTrail.

Multiple choice — select one answer

Answer choices

  1. a. AWS Organizations SCP
  2. b. EC2 instance profiles
  3. c. GuardDuty organization admin account
  4. d. Systems Manager compliance and Config rules

Architectural breakdown & explanation

SCPs set preventive guardrails.

Correct answer(s): a. AWS Organizations SCP

Exam domain: Domain 4: Security and Compliance (16% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified CloudOps Engineer – Associate bank. Run a full timed practice exam with domain-weighted random questions in your browser.