SCS-C02 · Question #77
A company wants to use AWS Systems Manager Patch Manager to patch Amazon EC2 instances that run Amazon Linux 2. The EC2 instances are running in a single AWS account. No internet connectivity is…
The correct answer is A. Create a gateway VPC endpoint for com.amazonaws.[region].s3. B. Create VPC endpoints for com.amazonaws.[region].ec2messages and E. Update the route tables with a route to the gateway VPC endpoint. https://docs.aws.amazon.com/systems-manager/latest/userguide/setup-create-vpc.html#sysman- setting-up-vpc-create
Question
A company wants to use AWS Systems Manager Patch Manager to patch Amazon EC2 instances that run Amazon Linux 2. The EC2 instances are running in a single AWS account. No internet connectivity is allowed from any EC2 instances in the account. A security engineer has configured the relevant settings in Patch Manager. The security engineer now needs to ensure that the EC2 instances can connect to the Systems Manager endpoint. Which combination of steps must the security engineer take to meet these requirements? (Choose three.)
Options
- ACreate a gateway VPC endpoint for com.amazonaws.[region].s3.
- BCreate VPC endpoints for com.amazonaws.[region].ec2messages and
- CCreate a NAT gateway.
- DUpdate the route tables to route Systems Manager traffic through the NAT gateway.
- EUpdate the route tables with a route to the gateway VPC endpoint.
- FUpdate the route tables to route the update traffic through the NAT gateway.
How the community answered
(47 responses)- A74% (35)
- C4% (2)
- D13% (6)
- F9% (4)
Explanation
https://docs.aws.amazon.com/systems-manager/latest/userguide/setup-create-vpc.html#sysman- setting-up-vpc-create
Topics
Community Discussion
No community discussion yet for this question.