AWS Certified SysOps Administrator – Associate — Question 391

A company hosts an application on Amazon EC2 instances. The instances are in an Amazon EC2 Auto Scaling group that uses a launch template. The amount of application traffic changes throughout the day. Scaling events happen frequently.

A SysOps administrator needs to help developers troubleshoot the application. When a scaling event removes an instance, EC2 Auto Scaling terminates the instance before the developers can log in to the instance to diagnose issues.

Which solution will prevent termination of the instance so that the developers can log in to the instance?

Answer options

• A. Ensure that the Delete on termination setting is turned off in the UserData section of the launch template.
• B. Update the Auto Scaling group by enabling instance scale-in protection for newly launched instances.
• C. Use Amazon Inspector to configure a rules package to protect the instances from termination.
• D. Use Amazon GuardDuty to configure rules to protect the instances from termination.

Correct answer: B

Explanation

Enabling instance scale-in protection prevents the Auto Scaling group from terminating protected instances during scale-in events, giving developers time to access the instances for troubleshooting. The 'Delete on termination' setting applies to EBS volumes rather than preventing EC2 instance termination by Auto Scaling. Amazon Inspector and Amazon GuardDuty are security assessment and threat detection services, respectively, and cannot be used to manage EC2 scaling behaviors.