DOP-C02 · Question #473
A company's EC2 fleet must maintain up-to-date security patches and compliance reporting. Which solution meets these requirements?
The correct answer is A. Use Systems Manager Patch Manager with AWS Config compliance rules and automation. AWS Systems Manager Patch Manager automates patch scanning and installation. Integrating with AWS Config enables compliance reporting and auto-remediation. This provides centralized patch compliance management per AWS Ops best practices.
Question
A company's EC2 fleet must maintain up-to-date security patches and compliance reporting. Which solution meets these requirements?
Options
- AUse Systems Manager Patch Manager with AWS Config compliance rules and automation
- BSSH into each instance manually.
- CRebuild instances in Auto Scaling groups with latest AMIs.
- DUse CloudFormation redeployment for every patch.
How the community answered
(25 responses)- A88% (22)
- C4% (1)
- D8% (2)
Explanation
AWS Systems Manager Patch Manager automates patch scanning and installation. Integrating with AWS Config enables compliance reporting and auto-remediation. This provides centralized patch compliance management per AWS Ops best practices.
Topics
Community Discussion
No community discussion yet for this question.