DOP-C02 · Question #53
A new zero-day vulnerability was found in OpenSSL requiring the immediate patching of a production web fleet running on Amazon Linux. Currently, OS updates are performed manually on a monthly basis an
The correct answer is C. Use Amazon EC2 Run Command to issue a package update command to all running production. https://aws.amazon.com/blogs/aws/ec2-run-command-is-now-a-cloudwatch-events-target/ EC2 Run Command is part of EC2 Systems Manager. It allows you to operate on collections of EC2 instances and on-premises servers reliably and at scale, in a controlled and selective fashion. You c
Question
A new zero-day vulnerability was found in OpenSSL requiring the immediate patching of a production web fleet running on Amazon Linux. Currently, OS updates are performed manually on a monthly basis and deployed using updates to the production Auto Scaling Group's launch configuration. Which method should a DevOps Engineer use to update packages in-place without downtime?
Options
- AUse AWS CodePipline and AWS CodeBuild to generate new copies of these packages, and
- BUse AWS Inspector to run "yum upgrade" on all running production instances, and manually
- CUse Amazon EC2 Run Command to issue a package update command to all running production
- DDefine a new AWS OpsWorks layer to match the running production instances, and use a recipe
How the community answered
(28 responses)- A18% (5)
- B7% (2)
- C71% (20)
- D4% (1)
Explanation
https://aws.amazon.com/blogs/aws/ec2-run-command-is-now-a-cloudwatch-events-target/ EC2 Run Command is part of EC2 Systems Manager. It allows you to operate on collections of EC2 instances and on-premises servers reliably and at scale, in a controlled and selective fashion. You can run scripts, install software, collect metrics and log files, manage patches, and much more, on both Windows and Linux.
Topics
Community Discussion
No community discussion yet for this question.