DOP-C02 · Question #348
A company that uses electronic patient health records runs a fleet of Amazon EC2 instances with an Amazon Linux operating system. The company must continuously ensure that the EC2 instances are runnin
The correct answer is A. Use AWS Systems Manager to create a new custom patch baseline that includes the default. AWS Systems Manager Patch Manager allows for the creation of custom patch baselines that can include both the default operating system repository and a custom repository. By using the AWS-RunPatchBaseline document, you can automate the verification and installation of patches, en
Question
A company that uses electronic patient health records runs a fleet of Amazon EC2 instances with an Amazon Linux operating system. The company must continuously ensure that the EC2 instances are running operating system patches and application patches that are in compliance with current privacy regulations. The company uses a custom repository to store application patches. A DevOps engineer needs to automate the deployment of operating system patches and application patches. The DevOps engineer wants to use both the default operating system patch repository and the custom patch repository. Which solution will meet these requirements with the LEAST effort?
Options
- AUse AWS Systems Manager to create a new custom patch baseline that includes the default
- BUse AWS Direct Connect to integrate the custom repository with the EC2 instances. Use Amazon
- CUse the yum-config-manager command to add the custom repository to the /etc/yum.repos.d
- DUse AWS Systems Manager to create a patch baseline for the default operating system
How the community answered
(47 responses)- A81% (38)
- B4% (2)
- C13% (6)
- D2% (1)
Explanation
AWS Systems Manager Patch Manager allows for the creation of custom patch baselines that can include both the default operating system repository and a custom repository. By using the AWS-RunPatchBaseline document, you can automate the verification and installation of patches, ensuring that the EC2 instances remain compliant with the latest updates. Using the BaselineOverride API provides the flexibility to apply the custom baseline as needed without managing multiple baselines separately, reducing effort and complexity. This approach integrates all required patch sources in a streamlined, automated manner.
Topics
Community Discussion
No community discussion yet for this question.