A Large Global Financial Services Company Has Multiple Business Units

question 353

Multiple Choice

A large global financial services company has multiple business units. The company wants to allow Developers to try new services, but there are multiple compliance requirements for different workloads. The Security team is concerned about the access strategy for on-premises and AWS implementations. They would like to enforce governance for AWS services used by business team for regulatory workloads, including Payment Card Industry (PCI) requirements. Which solution will address the Security team's concerns and allow the Developers to try new services?

• A) Implement a strong identity and access management model that includes users, groups, and roles in various AWS accounts. Ensure that centralized AWS CloudTrail logging is enabled to detect anomalies. Build automation with AWS Lambda to tear down unapproved AWS resources for governance.
• B) Build a multi-account strategy based on business units, environments, and specific regulatory requirements. Implement SAML-based federation across all AWS accounts with an on-premises identity store. Use AWS Organizations and build organizational units (OUs) structure based on regulations and service governance. Implement service control policies across OUs.
• C) Implement a multi-account strategy based on business units, environments, and specific regulatory requirements. Ensure that only PCI-compliant services are approved for use in the accounts. Build IAM policies to give access to only PCI-compliant services for governance.
• D) Build one AWS account for the company for the strong security controls. Ensure that all the service limits are raised to meet company scalability requirements. Implement SAML federation with an on-premises identity store, and ensure that only approved services are used in the account.

---

Definitions:

Poisson Distribution

A probability distribution that expresses the probability of a given number of events occurring in a fixed interval of time or space, assuming these events happen with a known constant mean rate and independently of the time since the last event.

Standard Deviation

An assessment of the range or distribution spread within a set of numbers.

Nuclear Power Plant

A facility that generates electricity by using nuclear reactions to produce heat, which then is used to power steam turbines.

Discrete Random Variables

Variables in statistical analysis that can take on a countable number of distinct values, often representing occurrences.