Exam AWS Certified DevOps Engineer - Professional DOP-C02 topic 1 question 33 discussion

Exam question from Amazon's AWS Certified DevOps Engineer - Professional DOP-C02

Question #: 33
Topic #: 1

[All AWS Certified DevOps Engineer - Professional DOP-C02 Questions]

A company that uses electronic health records is running a fleet of Amazon EC2 instances with an Amazon Linux operating system. As part of patient privacy requirements, the company must ensure continuous compliance for patches for operating system and applications running on the EC2 instances.
How can the deployments of the operating system and application patches be automated using a default and custom repository?

A. Use AWS Systems Manager to create a new patch baseline including the custom repository. Run the AWS-RunPatchBaseline document using the run command to verify and install patches.
B. Use AWS Direct Connect to integrate the corporate repository and deploy the patches using Amazon CloudWatch scheduled events, then use the CloudWatch dashboard to create reports.
C. Use yum-config-manager to add the custom repository under /etc/yum.repos.d and run yum-config-manager-enable to activate the repository.
D. Use AWS Systems Manager to create a new patch baseline including the corporate repository. Run the AWS-AmazonLinuxDefaultPatchBaseline document using the run command to verify and install patches.

Show Suggested Answer

Suggested Answer: A 🗳️

by jqso234 at April 14, 2023, 8:01 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

dzn

Highly Voted 10 months, 1 week ago

Selected Answer: A

AWS-AmazonLinuxDefaultPatchBaseline: defines which patches should be applied and which should be avoided. AWS-RunPatchBaseline: provides commands to actually run the patching process on the instance.

upvoted 6 times

...

thanhnv142

Most Recent 11 months ago

A is correct: AWS system manager and AWS-RunPatchBaseline to utilize a default and custom repo B and C are irrelevant D: AWS-AmazonLinuxDefaultPatchBaseline: this baseline has "default" in its name, it is a predefined baseline and cannot work with a custom repo

upvoted 4 times

...

davdan99

11 months, 3 weeks ago

Here are predefined documents that can not be modified (includes AWS-AmazonLinuxDefaultPatchBaseline) https://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-predefined-and-custom-patch-baselines.html#patch-manager-baselines-custom And here is about the AWS-RunPatchBaseline https://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-aws-runpatchbaseline.html

upvoted 2 times

1 year, 8 months ago

Selected Answer: A

To automate the deployment of operating system and application patches using a default and custom repository in Amazon EC2 instances with Amazon Linux operating systems, you can use AWS Systems Manager. You can create a new patch baseline in Systems Manager that includes the custom repository, then run the AWS-RunPatchBaseline document using the run command to verify and install patches. This allows you to ensure continuous compliance for patches while also automating the patch deployment process.

upvoted 1 times

...