AWS Certified SysOps Administrator – Associate — Question 144

A company updates its security policy to clarify cloud hosting arrangements for regulated workloads. Workloads that are identified as sensitive must run on hardware that is not shared with other customers or with other AWS accounts within the company.

Which solution will ensure compliance with this policy?

Answer options

• A. Deploy workloads only to Dedicated Hosts.
• B. Deploy workloads only to Dedicated Instances.
• C. Deploy workloads only to Reserved Instances.
• D. Place all instances in a dedicated placement group.

Correct answer: A

Explanation

The correct choice, A, ensures that workloads are hosted on Dedicated Hosts, providing physical isolation from other customers and AWS accounts. Options B and C do not guarantee the same level of isolation, as Dedicated Instances can still share the underlying hardware with other accounts, and Reserved Instances simply provide a pricing model without affecting isolation. Option D does not fulfill the requirement since a dedicated placement group can still share the hardware among instances.