DOP-C02 · Question #499
A company operates a fleet of Amazon EC2 instances that host critical applications and handle sensitive data. The EC2 instances must have up-to-date security patches to protect against…
The correct answer is A. Configure AWS Systems Manager Patch Manager and AWS Config with defined patch baselines. AWS Systems Manager Patch Manager provides a managed, automated way to define patch baselines and apply security updates consistently across an EC2 fleet without requiring direct instance access. Integrating AWS Config enables continuous monitoring and compliance reporting for…
Question
A company operates a fleet of Amazon EC2 instances that host critical applications and handle sensitive data. The EC2 instances must have up-to-date security patches to protect against vulnerabilities and ensure compliance with industry standards and regulations. The company needs an automated solution to monitor and enforce security patch compliance across the EC2 fleet. Which solution will meet these requirements?
Options
- AConfigure AWS Systems Manager Patch Manager and AWS Config with defined patch baselines
- BAccess each EC2 instance by using SSH keys. Check for and apply security updates by using
- CConfigure Auto Scaling groups that have scaling policies based on Amazon CloudWatch metrics.
- DUse AWS CloudFormation to recreate EC2 instances with the latest AMI every time a new patch
How the community answered
(39 responses)- A85% (33)
- B10% (4)
- C3% (1)
- D3% (1)
Explanation
AWS Systems Manager Patch Manager provides a managed, automated way to define patch baselines and apply security updates consistently across an EC2 fleet without requiring direct instance access. Integrating AWS Config enables continuous monitoring and compliance reporting for patch status, allowing the company to automatically detect, enforce, and audit patch compliance across all instances with minimal operational effort.
Topics
Community Discussion
No community discussion yet for this question.