SAP-C02 Practice Question: Design Solutions for Organizational Complexity
A company has an AWS Organizations setup with a management account and several member accounts. The finance team needs to receive a consolidated bill for all accounts and wants to apply volume discounts across the organization. The company also wants to prevent member accounts from leaving the organization without approval. Which action should the company take?
⚠ Common exam trap
The trap here is relying on monitoring tools like AWS Budgets or CloudTrail to prevent an action, when only a service control policy can actually block a member account from leaving the organization.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable all features in AWS Organizations and configure a service control policy that denies organizations:LeaveOrganization in member accounts.
Enabling all features in AWS Organizations provides consolidated billing and volume discounts, and it is a prerequisite for service control policies. A service control policy that denies organizations:LeaveOrganization in member accounts prevents them from leaving without approval. This is the only option that both delivers the billing benefits and enforces the membership restriction.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Enable all features in AWS Organizations and configure a service control policy that denies organizations:LeaveOrganization in member accounts.
Why this is correct
Enabling all features allows consolidated billing and volume discounts across the organization, and it also enables service control policies. A service control policy denying organizations:LeaveOrganization in member accounts prevents them from leaving without approval. This combination meets both the billing and the membership control requirements.
- ✗
Create an organization trail in AWS CloudTrail and configure an Amazon EventBridge rule to notify the finance team when an account leaves.
Why it's wrong here
An organization trail and EventBridge rule provide detection and notification, but they do not prevent a member account from leaving the organization. The requirement is to prevent the action, not just be alerted afterward. This approach is detective rather than preventive and therefore does not satisfy the stated need.
- ✗
Use AWS Resource Access Manager to share the billing account with member accounts and restrict the organizations:LeaveOrganization action with an IAM policy in each member account.
Why it's wrong here
AWS RAM shares resources, not billing accounts, and IAM policies in member accounts can be changed by those accounts, so they are not a reliable control. The management account cannot enforce an IAM policy in member accounts. A service control policy is the correct preventive mechanism, and RAM is irrelevant to billing consolidation.
- ✗
Enable consolidated billing only, and use AWS Budgets to alert the finance team when a member account attempts to leave.
Why it's wrong here
Consolidated billing provides a single bill and volume discounts, but it does not prevent member accounts from leaving the organization. AWS Budgets sends alerts about spending, not about membership changes, so it cannot block a leave action. This does not meet the requirement to prevent accounts from leaving without approval.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SAP-C02 question from scratch — 984 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Amazon Web Services exam blueprint
This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.