Exam AWS Certified SysOps Administrator - Associate topic 1 question 224 discussion

A; https://www.speakingofclouds.com/aws-dedicated-instances-vs-dedicated-hosts/

B for sure

Dedicated hardware-> dedicated host to provide isolated hardware

A is the correct

The solution that will ensure compliance with the policy is to deploy workloads only to Dedicated Hosts. This is because Dedicated Hosts provide physical isolation between instances that belong to different accounts or different parts of the same account. By deploying workloads to Dedicated Hosts, the company can ensure that sensitive workloads are not sharing hardware with other customers or with other accounts within the company. Deploying workloads only to Dedicated Instances, on the other hand, does not provide the same level of isolation as Dedicated Hosts because the underlying hardware is still shared with other instances from the same account.

I vote for A. Straight from AWS docs: “Dedicated hardware to support existing software licenses and improve compliance” Dedicated instances segregate on hardware level as well, though other non-dedicated instances of the same account may run workloads on it. This isn’t specified in the question, but AWS suggests dedicated hosts for extra visibility on instance placement when compliance is a requirement.

Dedicated Instances are Amazon EC2 instances that run in a VPC on hardware that's dedicated to a single customer. Your Dedicated instances are physically isolated at the host hardware level from instances that belong to other AWS accounts. Dedicated instances may share hardware with other instances from the same AWS account that are not Dedicated instances. The requirement here is to run oh hardware that is not shared with other customers or with other AWS accounts within the company. A and B both check the requirements, but dedicated instances are cheaper that dedicated hosts.

Option A, "Deploy workloads only to Dedicated Hosts," is a better solution as it ensures that sensitive workloads run on physical hardware that is dedicated to a single customer and is not shared with other instances or AWS accounts. This solution aligns with the requirements of the updated security policy and ensures compliance.

A - not B. Dedicated Instances can carry other workloads from other accounts in your company and the constraint is that is not allowed.

Both are valid, however I think the answer is A, here's why: The question asks "Which solution will ensure COMPLIANCE with this policy?" B. Deploy workloads only to Dedicated Instances. You can use Dedicated Hosts and Dedicated instances to launch Amazon EC2 instances on physical servers that are dedicated for your use. An important difference between a Dedicated Host and a Dedicated instance is that a Dedicated Host gives you additional visibility and control over how instances are placed on a physical server, and you can consistently deploy your instances to the same physical server over time. As a result, Dedicated Hosts enable you to use your existing server-bound software licenses and address corporate COMPLIANCE and regulatory requirements. Ref link: https://aws.amazon.com/ec2/pricing/dedicated-instances/ & https://aws.amazon.com/ec2/dedicated-hosts/

A nd B both are correct but B would be more cost effective. https://aws.amazon.com/ec2/pricing/dedicated-instances/ Dedicated Instances are Amazon EC2 instances that run in a VPC on hardware that's dedicated to a single customer. Your Dedicated instances are physically isolated at the host hardware level from instances that belong to other AWS accounts.

Ans is A