For Individuals For Educators

Ace your certifications with Practice Exams and AI assistance.

Browse Exams
For Educators
Blog

Privacy Policy
Terms of Service
Cookie Policy
Support

AWS SAA Exam Prep
PMI PMP Exam Prep
CPA Exam Prep
GCP PCA Exam Prep

© 2026 TinyHive Labs. Company number 16262776.

Practice AWS Solutions Architect Professional (SAP-C02)AWS Solutions Architect Professional SAP-C02 Practice Exam 6Question 16

Easy1 markMultiple Choice

Domain 1.4: Multi-Account EnvironmentMulti-AccountControl TowerGovernance

AWS SAP-C02 · Question 16 · Domain 1.4: Multi-Account Environment

A startup is growing rapidly and needs to establish a multi-account AWS environment based on best practices. They want automated account provisioning, centralized logging, and pre-configured security guardrails. Which service provides the MOST comprehensive solution?

Answer options:

A.

AWS Organizations

B.

AWS Control Tower

C.

AWS Service Catalog

D.

AWS Systems Manager

How to approach this question

Identify the service that deploys a 'landing zone'.

Full Answer

B.AWS Control Tower✓ Correct

AWS Control Tower provides the easiest way to set up and govern a secure, multi-account AWS environment based on best practices (a landing zone).

Common mistakes

Choosing Organizations alone, which requires manual setup of all governance features.

Question 15 All questions Question 17

Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 6

75 questions · hints · full answers · grading

Sign up free Take the exam

More questions from this exam

Q01A global enterprise requires highly available hybrid connectivity between its on-premises data ce...Hard Q02An organization has 50 VPCs across two AWS Regions connected via Transit Gateways (TGW). The TGWs...Hard Q03A company uses AWS Organizations. The network team wants to share a central Transit Gateway (TGW)...Medium Q04An enterprise has on-premises data centers in the US and Europe. They want to use the AWS global ...Hard Q05A company requires that all API calls to Amazon S3 from their VPC must not traverse the public in...Medium

View all 75 questions →