nerdexam
Amazon

SCS-C02 · Question #361

An employee keeps terminating EC2 instances on the production environment. You've determined the best way to ensure this doesn't happen is to add an extra layer of defense against terminating the…

The correct answer is A. Tag the instance with a production-identifying tag and add resource-level permissions to the B. Tag the instance with a production-identifying tag and modify the employees group to allow only. Tags enable you to categorize your AWS resources in different ways, for example, by purpose, owner, or environment. This is useful when you have many resources of the same type -- you can quickly identify a specific resource based on the tags you've assigned to it. Each tag…

Submitted by cyberguy42· Mar 6, 2026Identity and Access Management

Question

An employee keeps terminating EC2 instances on the production environment. You've determined the best way to ensure this doesn't happen is to add an extra layer of defense against terminating the instances. What is the best method to ensure the employee does not terminate the production instances? Choose the 2 correct answers from the options below

Options

  • ATag the instance with a production-identifying tag and add resource-level permissions to the
  • BTag the instance with a production-identifying tag and modify the employees group to allow only
  • CModify the IAM policy on the user to require MFA before deleting EC2 instances and disable MFA
  • DModify the IAM policy on the user to require MFA before deleting EC2 instances

How the community answered

(18 responses)
  • A
    78% (14)
  • C
    6% (1)
  • D
    17% (3)

Explanation

Tags enable you to categorize your AWS resources in different ways, for example, by purpose, owner, or environment. This is useful when you have many resources of the same type -- you can quickly identify a specific resource based on the tags you've assigned to it. Each tag consists of a key and an optional value, both of which you define Options C&D are incorrect because it will not ensure that the employee cannot terminate the

Topics

#IAM resource-level permissions#EC2 termination protection#MFA enforcement#instance tagging

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice