Practice sessionCloud ComputingAWS Solutions Architect"

AWS Solutions Architect Practice Exam 2025

A comprehensive assessment covering AWS architecture, governance, security, compliance enforcement, and cloud best practices for solutions architects.

Active sessionTimedSTEMAdaptive

Jump to questions Browse catalog

Question 1 of 630%

Time remaining90:00

Attempts allowedUnlimited

Difficulty mixM

Back to exams

Question 1

MEDIUM

90:00

A company has an organization in AWS Organizations with many OUs that contain many AWS accounts. The organization has a dedicated delegated administrator AWS account. The company needs the accounts in one OU to have server-side encryption enforced for all Amazon Elastic Block Store (Amazon EBS) volumes and Amazon Simple Queue Service (Amazon SQS) queues that are created or updated on an AWS CloudFormation stack. Which solution will enforce this policy before a CloudFormation stack operation in the accounts of this OU?

Select one answer

Activate trusted access to CloudFormation StackSets. Create a CloudFormation Hook that enforces server-side encryption on EBS volumes and SQS queues. Deploy the Hook across the accounts in the OU by using StackSets.

Set up AWS Config in all the accounts in the OU. Use AWS Systems Manager to deploy AWS Config rules that enforce server-side encryption for EBS volumes and SQS queues across the accounts in the OU.

Write an SCP to deny the creation of EBS volumes and SQS queues unless the EBS volumes and SQS queues have server-side encryption. Attach the SCP to the OU.

Create an AWS Lambda function in the delegated administrator account that checks whether server-side encryption is enforced for EBS volumes and SQS queues. Create an IAM role to provide the Lambda function access to the accounts in the OU.

Question 1 of 63

Community

Loading ranked answers and discussion...

AWS Solutions Architect Practice Exam 2025

Manage your cookie preferences