Amazon Exam DOP-C01 Topic 12 Question 88 Discussion

Actual exam question for Amazon's DOP-C01 exam

Question #: 88
Topic #: 12

A company requires its internal business teams to launch resources through pre-approved AWS CloudFormation templates only. The security team requires automated monitoring when resources drift from their expected state.

Which strategy should be used to meet these requirements?

AAllow users to deploy Cloud Formation stacks using a CloudFormation service role only. Use CloudFormation drift detection to detect when resources have drifted from their expected state.

BAllow users to deploy CloudFormation stacks using a CloudFormation service role only. Use AWS Config rules to detect when resources have drifted from their expected state.

CAllow users to deploy CloudFormation stacks using AWS Service Catalog only Enforce the use of a launch constraint Use AWS Config rules to detect when resources have drifted from their expected state.

DAllow users to deploy CloudFormation stacks using AWS Service Catalog only Enforce the use of a template constraint Use Amazon EventBridge (Amazon CloudWatch Events) notifications to detect when resources have drifted from their expected state.

Show Suggested Answer

Suggested Answer: B

by Sylvia at Mar 15, 2024, 05:57 PM

Limited Time Offer

25%

Off

Get Premium DOP-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Cherrie

5 months ago

That's true, Tayna. AWS Config rules could provide additional benefits for monitoring.

upvoted 0 times

...

Tayna

5 months ago

I think option B might also work well. AWS Config rules can be really powerful for monitoring resource drift.

upvoted 0 times

...

Mari

5 months ago

I agree with Cherrie. Option A seems like the most straightforward solution for this scenario.

upvoted 0 times

...

Cherrie

5 months ago

I think option A is the best choice. Using CloudFormation drift detection would be really helpful.

upvoted 0 times

...

Salome

5 months ago

That's true, but I still think option A is more efficient for this scenario.

upvoted 0 times

...

Corazon

5 months ago

But what about option B? Using AWS Config rules could provide more detailed monitoring.

upvoted 0 times

...

Rossana

6 months ago

I agree, option A seems to be the most straightforward way to meet both requirements.

upvoted 0 times

...

Salome

6 months ago

I think option A is the best choice because it allows users to deploy through CloudFormation and uses drift detection.

upvoted 0 times

...

Mee

7 months ago

Ooh, good catch! I'd say the template constraint is probably the way to go, since it allows you to enforce the use of a specific CloudFormation template. That way, you know the resources are being deployed exactly as expected.

upvoted 0 times

...

Valentin

7 months ago

Yeah, those options definitely seem like the way to go. I'm curious about the difference between using a launch constraint versus a template constraint though. Gotta make sure we're picking the right one.

upvoted 0 times

Sherill

6 months ago

A) Allow users to deploy Cloud Formation stacks using a CloudFormation service role only. Use CloudFormation drift detection to detect when resources have drifted from their expected state.

upvoted 0 times

...

Vallie

7 months ago

That makes sense. A template constraint would probably ensure a more standardized deployment across the company.

upvoted 0 times

...

Stephaine

7 months ago

D) Allow users to deploy CloudFormation stacks using AWS Service Catalog only Enforce the use of a template constraint Use Amazon EventBridge (Amazon CloudWatch Events) notifications to detect when resources have drifted from their expected state.

upvoted 0 times

...

Kelvin

7 months ago

I think using a launch constraint would restrict the choice of templates users can pick, while a template constraint would enforce the structure of the selected template.

upvoted 0 times

...

Ressie

7 months ago

C) Allow users to deploy CloudFormation stacks using AWS Service Catalog only Enforce the use of a launch constraint Use AWS Config rules to detect when resources have drifted from their expected state.

upvoted 0 times

...

Chan

7 months ago

B) Allow users to deploy CloudFormation stacks using a CloudFormation service role only. Use AWS Config rules to detect when resources have drifted from their expected state.

upvoted 0 times

...

Delsie

7 months ago

A) Allow users to deploy Cloud Formation stacks using a CloudFormation service role only. Use CloudFormation drift detection to detect when resources have drifted from their expected state.

upvoted 0 times

...

Denae

7 months ago

Exactly! And the use of AWS Config rules or Amazon EventBridge notifications to detect drift is a nice touch. Covers all the bases.

upvoted 0 times

...

Nieves

7 months ago

Haha, nice try, but I don't think the security team is going to go for that. They're pretty serious about this stuff, you know? Better to play by the rules and avoid any unwanted surprises down the line.

upvoted 0 times

...