Amazon Exam SCS-C01 Topic 2 Question 39 Discussion

Actual exam question for Amazon's SCS-C01 exam

Question #: 39
Topic #: 2

An employee keeps terminating EC2 instances on the production environment. You've determined the best way to ensure this doesn't happen is to add an extra layer of defense against terminating the instances. What is the best method to ensure the employee does not terminate the production instances? Choose the 2 correct answers from the options below

Please select:

ATag the instance with a production-identifying tag and add resource-level permissions to the employee user with an explicit deny on the terminate API call to instances with the production tag. <

BTag the instance with a production-identifying tag and modify the employees group to allow only start stop, and reboot API calls and not the terminate instance call.

CModify the IAM policy on the user to require MFA before deleting EC2 instances and disable MFA access to the employee

DModify the IAM policy on the user to require MFA before deleting EC2 instances

Show Suggested Answer

Suggested Answer: A, D, F

by Beckie at Feb 28, 2023, 06:20 PM

Limited Time Offer

25%

Off

Get Premium SCS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!