Design Secure Architectures Practice Question

Question

For a cross-account deployment, an architect is reviewing multi-account governance requirement set 4. Which design choice best fits the requirement while following AWS architectural best practices?

Answer choices

1. A. Use aws organizations, scps, and centralized logging for separated environments.
2. B. Place all components on a single large instance to simplify troubleshooting.
3. C. Use long-lived access keys in application configuration so services can call AWS APIs directly.
4. D. Disable monitoring until the workload reaches steady production traffic.

Correct Answer

A. Use aws organizations, scps, and centralized logging for separated environments.

Explanation

The best answer applies multi-account governance: use AWS Organizations, SCPs, and centralized logging for separated environments. The other options increase operational risk, weaken security, or remove observability that an AWS Solutions Architect should preserve.

Question details

• Difficulty: easy
• Domain: Design Secure Architectures
• Objective: multi-account governance

Practice more

Start Design Secure Architectures practice

Back to Design Secure Architectures