ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified DevOps Engineer - Professional DOP-C02 All Questions

View all questions & answers for the AWS Certified DevOps Engineer - Professional DOP-C02 exam
Go to Exam

Exam AWS Certified DevOps Engineer - Professional DOP-C02 topic 1 question 163 discussion

Exam question from Amazon's AWS Certified DevOps Engineer - Professional DOP-C02
Question #: 163
Topic #: 1
[All AWS Certified DevOps Engineer - Professional DOP-C02 Questions]

A company has an AWS Control Tower landing zone that manages its organization in AWS Organizations. The company created an OU structure that is based on the company's requirements. The company's DevOps team has established the core accounts for the solution and an account for all centralized AWS CloudFormation and AWS Service Catalog solutions.

The company wants to offer a series of customizations that an account can request through AWS Control Tower.

Which combination of steps will meet these requirements? (Choose three.)

  • A. Enable trusted access for CloudFormation with Organizations by using service-managed permissions.
  • B. Create an IAM role that is named AWSControlTowerBlueprintAccess. Configure the role with a trust policy that allows the AWSControlTowerAdmin role in the management account to assume the role. Attach the AWSServiceCatalogAdminFullAccess IAM policy to the AWSControlTowerBlueprintAccess role.
  • C. Create a Service Catalog product for each CloudFormation template.
  • D. Create a CloudFormation stack set for each CloudFormation template. Enable automatic deployment for each stack set. Create a CloudFormation stack instance that targets specific OUs.
  • E. Deploy the Customizations for AWS Control Tower (CfCT) CloudFormation stack.
  • F. Create a CloudFormation template that contains the resources for each customization.
Show Suggested Answer Hide Answer
Suggested Answer: BCF 🗳️
by d262e67 at Dec. 31, 2023, 11:25 a.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Slays
3 months, 2 weeks ago
Selected Answer: BCE
CfCT provides a framework that automates the deployment of custom resources and policies across your AWS Control Tower environment. Creating and deploying individual CloudFormation templates for each customization requires significant manual effort.
upvoted 1 times
...
VerRi
4 months, 3 weeks ago
Selected Answer: ACE
"customisations that an account can request" It is an ongoing customisation, CfCt does better than AFC.
upvoted 1 times
...
awsarchitect5
5 months ago
Selected Answer: BCE
CfCT provides predefined stacksets that extend Control Tower. Offers a series of customization.
upvoted 1 times
...
hzaki
8 months, 1 week ago
I think the correct answer is ACE. 1- Enable trusted access for CloudFormation with Organizations to allow cross-account deployments. 2- Create Service Catalog products for each CloudFormation template to provide a self-service portal. 3- Deploy the Customizations for AWS Control Tower (CfCT) stack to automate and manage customizations across your organization.
upvoted 1 times
...
Gomer
9 months, 1 week ago
Selected Answer: BCF
"Steps to set up Account Factory for the customization process": 1. "Create the required role...." - "The role must be named AWSControlTowerBlueprintAccess." - "The AWSControlTowerBlueprintAccess role must be set up to grant trust to" [...] - "The role named AWSControlTowerAdmin in the AWS Control Tower management account." - AWS Control Tower requires that the managed policy named AWSServiceCatalogAdminFullAccess must be attached to the AWSControlTowerBlueprintAccess role. (Required permissions policy) 2. "Create the AWS Service Catalog product..." [...] https://docs.aws.amazon.com/controltower/latest/userguide/af-customization-page.html https://docs.aws.amazon.com/controltower/latest/userguide/afc-setup-steps.html
upvoted 2 times
...
dkp
11 months, 3 weeks ago
Selected Answer: BCF
ans: BCF
upvoted 1 times
...
WhyIronMan
1 year ago
Selected Answer: BCF
B,C,F is the only answer
upvoted 1 times
...
thanhnv142
1 year, 1 month ago
Selected Answer: BCF
BCF are correct: <an account for all centralized AWS CloudFormation > means we need to set up a role for this accoun A: Trusted access is for assuming role only D: no mention of customization E: CFCT is needed only when we need to apply to best practice
upvoted 3 times
...
thanhnv142
1 year, 1 month ago
BCF are correct: <an account for all centralized AWS CloudFormation > means we need to set up a role for this accoun E: CFCT is for when we need to apply to best practice
upvoted 1 times
...
yuliaqwerty
1 year, 2 months ago
Selected Answer: BCF
answer BCF
upvoted 2 times
...
kabary
1 year, 3 months ago
Selected Answer: BCF
https://docs.aws.amazon.com/controltower/latest/userguide/afc-setup-steps.html
upvoted 3 times
...
d262e67
1 year, 3 months ago
Selected Answer: BCF
https://docs.aws.amazon.com/controltower/latest/userguide/afc-setup-steps.html
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago