nerdexam
Amazon

DOP-C02 · Question #324

A company's DevOps engineer must install a software package on 30 on-premises VMs and 15 Amazon EC2 instances. The DevOps engineer needs to ensure that all VMs receive the package in a process that is

The correct answer is B. Install the AWS Systems Manager Agent (SSM Agent) on all VMs. Use the SSM Agent to install. SSM Agent allows you to manage both on-premises VMs and EC2 instances from a single control plane in AWS Systems Manager. By installing the SSM Agent on all VMs, you can automate the software installation process across all instances using Run Command or Automation workflows. Thi

Submitted by rohit_dlh· Mar 6, 2026Configuration Management and Infrastructure as Code

Question

A company's DevOps engineer must install a software package on 30 on-premises VMs and 15 Amazon EC2 instances. The DevOps engineer needs to ensure that all VMs receive the package in a process that is auditable and that any configuration drift on the VMs is automatically identified and alerted on. The company uses AWS Direct Connect to connect its on-premises data center to AWS. Which solution will meet these requirements with the MOST operational efficiency?

Options

  • AWrite a script that iterates through the list of VMs once a week. Configure the script to check for
  • BInstall the AWS Systems Manager Agent (SSM Agent) on all VMs. Use the SSM Agent to install
  • CWrite a script that checks if the package is installed across the environment. Configure the script
  • DLog in to each VM. Use a local package manager to install the package. Use AWS Config to

How the community answered

(71 responses)
  • A
    3% (2)
  • B
    80% (57)
  • C
    11% (8)
  • D
    6% (4)

Explanation

SSM Agent allows you to manage both on-premises VMs and EC2 instances from a single control plane in AWS Systems Manager. By installing the SSM Agent on all VMs, you can automate the software installation process across all instances using Run Command or Automation workflows. This approach scales easily and eliminates the need to manually log in to each VM or write custom scripts for different environments. AWS Config is a service that tracks the configuration of your AWS resources and can be extended to track on-premises resources via SSM. It can automatically detect any configuration drift (e.g., if the package gets removed or changed) and alert the system administrator in real- time. This ensures that any deviations from the desired configuration are flagged immediately, providing a continuous audit trail. Amazon SNS provides an efficient way to notify the system administrator whenever a configuration drift is detected. It integrates well with AWS Config and ensures that the appropriate personnel is notified promptly, ensuring rapid remediation. By using SSM Agent and AWS Config, you can automate package installation, continuously monitor for drift, and provide a fully auditable solution with minimal operational overhead.

Topics

#Systems Manager#SSM Agent#Hybrid cloud#Configuration management

Community Discussion

No community discussion yet for this question.

Full DOP-C02 Practice