SCS-C02 Question #1: Real Exam Question with Answer & Explanation

Question

An international company has established a new business entity in South Korea. The company also has established a new AWS account to contain the workload for the South Korean region. The company has set up the workload in the new account in the ap-northeast-2 Region. The workload consists of three Auto Scaling groups of Amazon EC2 instances. All workloads that operate in this Region must keep system logs and application logs for 7 years. A security engineer must implement a solution to ensure that no logging data is lost for each instance during scaling activities. The solution also must keep the logs for only the required period of 7 years. Which combination of steps should the security engineer take to meet these requirements? (Choose three.)

Options

• AEnsure that the Amazon CloudWatch agent is installed on all the EC2 instances that the Auto
• BSet the log retention for desired log groups to 7 years.
• CAttach an IAM role to the launch configuration or launch template that the Auto Scaling groups
• DAttach an IAM role to the launch configuration or launch template that the Auto Scaling groups
• EEnsure that a log forwarding application is installed on all the EC2 instances that the Auto Scaling
• FConfigure an Amazon S3 Lifecycle policy on the target S3 bucket to expire objects after 7 years.