AmazonAmazon
SCS-C02 · Question #432
SCS-C02 Question #432: Real Exam Question with Answer & Explanation
Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #432. The question stem and answer options stay visible for context.
Submitted by dimitri_ru· Mar 6, 2026
Question
A company finds that one of its Amazon EC2 instances suddenly has a high CPU usage. The company does not know whether the EC2 instance is compromised or whether the operating system is performing background cleanup. Which combination of steps should a security engineer take before investigating the issue? (Choose three.)
Options
- ADisable termination protection for the EC2 instance if termination protection has not been
- BEnable termination protection for the EC2 instance if termination protection has not been enabled.
- CTake snapshots of the Amazon Elastic Block Store (Amazon EBS) data volumes that are
- DRemove all snapshots of the Amazon Elastic Block Store (Amazon EBS) data volumes that are
- ECapture the EC2 instance metadata, and then tag the EC2 instance as under quarantine.
- FImmediately remove any entries in the EC2 instance metadata that contain sensitive information.
Unlock SCS-C02 to see the answer
You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.