A company has an application that runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances are in an Amazon EC2 Auto Scaling group and are attached to Amazon Elastic…

Question

Options

• ATake an EBS volume snapshot of the instance and store the snapshot in an Amazon S3 bucket.
• BTake a memory snapshot of the instance and store the snapshot in an Amazon S3 bucket. Stop
• CDetach the instance from the Auto Scaling group. Deregister the instance from the ALB. Take an
• DDetach the instance from the Auto Scaling group Deregister the instance from the ALB. Stop the

• A
  6% (2)
• B
  74% (26)
• C
  14% (5)
• D
  6% (2)

Explanation

It preserves the forensic evidence from the instance in the correct order. The first step is to take a memory snapshot of the instance and store it in an S3 bucket, as memory data is volatile and can be lost when the instance is stopped. The second step is to stop the instance, which will prevent any further changes to the EBS volume. The third step is to take an EBS volume snapshot of the instance and store it in an S3 bucket, which will capture the disk state of the instance. The last two steps are to detach the instance from the Auto Scaling group and deregister it from the ALB, which will isolate the instance from the rest of the application.

No community discussion yet for this question.