AWS Certified Solutions Architect - Professional SAP-C02 — Topic 1 Question 370

Question

A company has multiple AWS accounts. The company recently had a security audit that revealed many unencrypted Amazon Elastic Block Store (Amazon EBS) volumes attached to Amazon EC2 instances. A solutions architect must encrypt the unencrypted volumes and ensure that unencrypted volumes will be detected automatically in the future. Additionally, the company wants a solution that can centrally manage multiple AWS accounts with a focus on compliance and security. Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)

Accepted Answer

Correct answer: A, C. The correct answer is A, C. Option A: Create an organization in AWS Organizations. Set up AWS Control Tower, and turn on the strongly recommended controls (guardrails). Join all accounts to the organization. Categorize the AWS accounts into OUs. Option C: Create a snapshot of each unencrypted volume. Create a new encrypted volume from the unencrypted snapshot. Detach the existing volume, and replace it with the encrypted volume. AWS Organizations centrally governs and secures multiple AWS accounts. AWS Control Tower sets up and governs a secure multi-account landing zone.

AWS Certified Solutions Architect - Professional SAP-C02 — Question 370