nerdexam
Amazon

SOA-C02 · Question #694

A company has deployed Amazon EC2 instances from custom Amazon Machine Images (AMIs) in two AWS Regions. The company registered all the instances with AWS Systems Manager. The company discovers that t

Sign in or unlock SOA-C02 to reveal the answer and full explanation for question #694. The question stem and answer options stay visible for context.

Submitted by rachelw· Mar 30, 2026Deployment, Provisioning, and Automation

Question

A company has deployed Amazon EC2 instances from custom Amazon Machine Images (AMIs) in two AWS Regions. The company registered all the instances with AWS Systems Manager. The company discovers that the operating system on some instances has a significant zero-day exploit. However, the company does not know how many instances are affected. A SysOps administrator must implement a solution to deploy operating system patches for the affected EC2 instances. Which solution will meet this requirement with the LEAST operational overhead?

Options

  • ADefine a patch baseline in Systems Manager Patch Manager. Use a Patch Manager scan to
  • BUse AWS Config to identify the affected instances. Define a patch baseline in Systems Manager
  • CCreate an Amazon EventBridge rule to react to Systems Manager Compliance events. Configure
  • DUse AWS Config to identify the affected instances. Update the existing EC2 AMIs with the desired

Unlock SOA-C02 to see the answer

You've previewed enough free SOA-C02 questions. Unlock SOA-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Systems Manager Patch Manager#patch compliance#EventBridge automation#zero-day patching
Full SOA-C02 Practice