ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Solutions Architect - Professional All Questions

View all questions & answers for the AWS Certified Solutions Architect - Professional exam
Go to Exam

Exam AWS Certified Solutions Architect - Professional topic 1 question 800 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional
Question #: 800
Topic #: 1
[All AWS Certified Solutions Architect - Professional Questions]

A company has used infrastructure as code (IaC) to provision a set of two Amazon EC2 instances. The instances have remained the same for several years.
The company's business has grown rapidly in the past few months. In response the company's operations team has implemented an Auto Scaling group to manage the sudden increases in traffic. Company policy requires a monthly installation of security updates on all operating systems that are running.
The most recent security update required a reboot. As a result, the Auto Scaling group terminated the instances and replaced them with new, unpatched instances.
Which combination of steps should a solutions architect recommend to avoid a recurrence of this issue? (Choose two.)

  • A. Modify the Auto Scaling group by setting the Update policy to target the oldest launch configuration for replacement.
  • B. Create a new Auto Scaling group before the next patch maintenance. During the maintenance window, patch both groups and reboot the instances.
  • C. Create an Elastic Load Balancer in front of the Auto Scaling group. Configure monitoring to ensure that target group health checks return healthy after the Auto Scaling group replaces the terminated instances.
  • D. Create automation scripts to patch an AMI, update the launch configuration, and invoke an Auto Scaling instance refresh.
  • E. Create an Elastic Load Balancer in front of the Auto Scaling group. Configure termination protection on the instances.
Show Suggested Answer Hide Answer
Suggested Answer: CD 🗳️
by techn00b at Dec. 29, 2021, 4:19 a.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
foureye2004
Highly Voted 2 years, 4 months ago
Selected Answer: CD
A incorrrect: default oldest launchconfiguration will be terminated first https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-termination-policies.html B. Incorrect: No need to create a new ASG C. Correct: Need a loadbalancer to make sure the request route to the healthy instance. D. Correct: Script to update OS patch, Lambda to update a launch configuration and trigger Autoscaling Instance refresh E. Incorrect: Termination protection is not help.
upvoted 10 times
...
rodrod
Most Recent 1 year, 2 months ago
Selected Answer: CD
A does not make sense. D will replace all instances anyways. A makes sense for other scenarios like scale in. Az rebalancing etc
upvoted 1 times
...
ggrodskiy
1 year, 4 months ago
Correct CD.
upvoted 1 times
...
AjayD123
1 year, 10 months ago
D cannot be correct, as only launch templates can be modified and not legacy launch configuration
upvoted 2 times
...
Ni_yot
2 years, 3 months ago
C and D. The following example updates an Auto Scaling group with a newly patched AMI. This approach ensures that new images are automatically made available to different computing environments that use Auto Scaling groups. The final step of the automation in this example uses a Python function to create a new launch template that uses the newly patched AMI. Then the Auto Scaling group is updated to use the new launch template. In this type of Auto Scaling scenario, users could terminate existing instances in the Auto Scaling group to force a new instance to launch that uses the new image. Or, users could wait and allow scale-in or scale-out events to naturally launch newer instances.
upvoted 4 times
...
asfsdfsdf
2 years, 4 months ago
Selected Answer: AD
E and B are eliminated they don't make any sense D is a must since need to patch the AMI and create a new launch configuration update it in the AS and execute refresh. Both A and C are correct for this use case, C - will make sure servers are running correctly after patching and A will make sure the unpatched EC2s will be terminated first. Since the requirement is to make sure ASG is to have only latest configuration I have to choose AD - if A was with "SkipMatching" it was making more sense
upvoted 3 times
...
bobsmith2000
2 years, 6 months ago
Selected Answer: AD
Even through you cannot update launch config, I suppose it's AD Right by the book: - latest ami in ASG - instances refresh
upvoted 3 times
...
user0001
2 years, 7 months ago
A/D, you need to update AMI otherwise you wont get the latest or resolve the security issue
upvoted 1 times
...
SaiKrish123
2 years, 7 months ago
C&D in autoscaling group launch configuration need to be updated with AMI
upvoted 1 times
...
Alexey79
2 years, 9 months ago
Selected Answer: AD
A https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-instance-termination.html “The termination policy for the Auto Scaling group controls which instances are replaced first.” “If you did not assign a specific termination policy to the group, Amazon EC2 Auto Scaling uses the default termination policy. It selects the Availability Zone with two instances, and terminates the instance that was launched from the oldest launch template or launch configuration.” Both C and D correct and describe need for refresh EC2 Instances with newest template. But, C doesn’t mention Patching phase, only D does. In question, ELB requirement is not mentioned.
upvoted 1 times
...
usmanbaigmughal
2 years, 10 months ago
C And D: https://aws.amazon.com/blogs/compute/introducing-instance-refresh-for-ec2-auto-scaling/#:~:text=You%20can%20trigger%20an%20Instance,ASG%20terminates%20and%20launches%20instances.
upvoted 2 times
...
saeidp
2 years, 10 months ago
C and D Walkthrough: Simplify AMI patching using Automation, AWS Lambda, and Parameter Store https://docs.aws.amazon.com/systems-manager/latest/userguide/automation-walk-patch-windows-ami-simplify.html Walkthrough: Patch an AMI and update an Auto Scaling group https://docs.aws.amazon.com/systems-manager/latest/userguide/automation-walk-patch-windows-ami-autoscaling.html
upvoted 2 times
...
Smartphone
2 years, 11 months ago
Answer is A & C To change the launch configuration for an Auto Scaling group, use an existing launch configuration as the basis for a new launch configuration. Then, update the Auto Scaling group to use the new launch configuration. After you change the launch configuration for an Auto Scaling group, any new instances are launched using the new configuration options, but existing instances are not affected. To update the existing instances, terminate them so that they are replaced by your Auto Scaling group, or allow auto scaling to gradually replace older instances with newer instances based on your termination policies. https://docs.aws.amazon.com/autoscaling/ec2/userguide/change-launch-config.html
upvoted 1 times
...
AwsSuperTrooper
2 years, 11 months ago
I believe it should be A & C
upvoted 1 times
...
techn00b
2 years, 11 months ago
Think its D & E
upvoted 3 times
usmanbaigmughal
2 years, 10 months ago
C And D For E : Termination protection have no sense. https://aws.amazon.com/blogs/compute/introducing-instance-refresh-for-ec2-auto-scaling/#:~:text=You%20can%20trigger%20an%20Instance,ASG%20terminates%20and%20launches%20instances.
upvoted 1 times
sashsz
2 years, 7 months ago
D & E - make sure that the new instances are patched after they are created and keep the old running to serve the traffic. NO much to think about .
upvoted 1 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago