Your application hosted on AWS makes use of CloudHSM for getting SSL certificates. These certificates are installed on EC2 Instances behind an Autoscaling Group. How can you ensure that the CloudHSM modules are scaled along with the EC2 Instances for ensuring on-time delivery of the SSL certificates?

Answer options:

A.Create a Network Load balancer and place the CloudHSM device behind it.
B.Just specify the number of HSM modules in the cluster.
C.Create an Application Load balancer and place the CloudHSM device behind it.
D.Create another Autoscaling Group for the CloudHSM modules.

Answer – B
The AWS Documentation mentions the following.
AWS CloudHSM provides hardware security modules (HSMs) in a cluster. A cluster is a collection of individual HSMs that AWS CloudHSM keeps in sync. You can think of a cluster as one logical HSM. When you perform a task or operation on one HSM in a cluster, the other HSMs in that cluster are automatically kept up to date.
You can create a cluster that has from 1 to 28 HSMs (the default limit is 6 HSMs per AWS account per AWS Region). You can place the HSMs in different Availability Zones in an AWS Region. Adding more HSMs to a cluster provides higher performance. Spreading clusters across Availability Zones provides redundancy and high availability.
Options A, C and D are incorrect since the Load balancing capability already comes along with the cluster.
For more information on clusters in CloudHSM, please refer to the below URL
https://docs.aws.amazon.com/cloudhsm/latest/userguide/clusters.html