SAP-C02 Practice Question: Accelerate Workload Migration and Modernization

Exhibit

Refer to the exhibit.
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "ec2:DescribeInstances",
        "ec2:StartInstances",
        "ec2:StopInstances"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Deny",
      "Action": "ec2:TerminateInstances",
      "Resource": "*",
      "Condition": {
        "StringNotEquals": {
          "aws:RequestedRegion": "us-east-1"
        }
      }
    }
  ]
}

An IAM policy allows a user to start and stop EC2 instances but denies terminating instances under a specific condition. Which action will the policy deny?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Terminating an EC2 instance in the eu-west-1 region

The Deny statement applies when the condition "StringNotEquals" is true, meaning the requested region is NOT us-east-1. So terminating an instance in a region other than us-east-1 is denied. Terminating in us-east-1 is allowed (since the condition is not met). Starting and stopping are allowed by the first statement.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Terminating an EC2 instance in the eu-west-1 region
Why this is correct
The Deny statement denies terminating when the region is not us-east-1, so terminating in eu-west-1 is denied.
✗
Starting an EC2 instance in the us-west-2 region
Why it's wrong here
Starting is allowed by the first statement regardless of region.
✗
Stopping an EC2 instance in the eu-west-1 region
Why it's wrong here
Stopping is allowed by the first statement regardless of region.
✗
Terminating an EC2 instance in the us-east-1 region
Why it's wrong here
The Deny condition only denies when the region is not us-east-1; terminating in us-east-1 is allowed.

Go deeper

SAP-C02 Practice Question: Accelerate Workload Migration and Modernization

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question