Question

[Deployment, Provisioning, and Automation] To manage Auto Scaling group instances that have OS vulnerabilities, the SysOps administrator needs an automated patching solution. Options:

Accepted Answer

Use AWS Systems Manager Patch Manager to patch the instances during a scheduled maintenance window. In the AWS-RunPatchBaseline document, ensure that the RebootOption parameter is set to RebootIfNeeded.

Answer

Use EC2 Image Builder pipelines on a schedule to create new Amazon Machine Images (AMIs) and new launch templates that reference the new AMIs. Use the instance refresh feature for EC2 Auto Scaling to replace instances.

Answer

Use AWS Config to scan for operating system vulnerabilities and to patch instances when the instance status changes to NON_COMPLIANT. Send an Amazon Simple Notification Service (Amazon SNS) notification to an operations team to reboot the instances during off-peak hours.

Answer

In the Auto Scaling launch template, provide an Amazon Machine Image (AMI) ID for an AWS- provided base image. Update the user data with a shell script to download and install patches.

[Deployment, Provisioning, and Automation] To manage Auto Scaling group instances that have OS vulnerabilities, the SysOps administrator needs an…

Take the free SOA-C02 practice test

Other SOA-C02 practice questions