nerdexam
Amazon

SOA-C03 · Question #145

A company runs applications on Amazon EC2 instances. Many of the instances are not patched. The company has a tagging policy. All the instances are tagged with details about the owners, application, a

Sign in or unlock SOA-C03 to reveal the answer and full explanation for question #145. The question stem and answer options stay visible for context.

Submitted by andreas_gr· Mar 5, 2026Deployment, provisioning, and automation

Question

A company runs applications on Amazon EC2 instances. Many of the instances are not patched. The company has a tagging policy. All the instances are tagged with details about the owners, application, and environment. AWS Systems Manager Agent (SSM Agent) is installed on all the instances. A SysOps administrator must implement a solution to automatically patch all existing and future instances that have "Prod" in the environment tag. The SysOps administrator plans to create a patch policy in Systems Manager Patch Manager. Which solution will meet the patching requirements with the LEAST operational overhead?

Options

  • ADefine targets of the patch policy by specifying node tags that match the company's tagging
  • BConfigure an AWS Lambda function to scan for new instances and to add the instances to the
  • CCreate resource groups. Add the existing instances to the resource groups. Configure an AWS
  • DCreate resource groups. Add the existing instances to the resource groups. Create an Amazon

Unlock SOA-C03 to see the answer

You've previewed enough free SOA-C03 questions. Unlock SOA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Patch Manager#Systems Manager#EC2 tagging#patch policy
Full SOA-C03 Practice