Exam AWS Certified DevOps Engineer - Professional DOP-C02 topic 1 question 47 discussion

Exam question from Amazon's AWS Certified DevOps Engineer - Professional DOP-C02

Question #: 47
Topic #: 1

[All AWS Certified DevOps Engineer - Professional DOP-C02 Questions]

A company runs an application with an Amazon EC2 and on-premises configuration. A DevOps engineer needs to standardize patching across both environments. Company policy dictates that patching only happens during non-business hours.
Which combination of actions will meet these requirements? (Choose three.)

A. Add the physical machines into AWS Systems Manager using Systems Manager Hybrid Activations.
B. Attach an IAM role to the EC2 instances, allowing them to be managed by AWS Systems Manager.
C. Create IAM access keys for the on-premises machines to interact with AWS Systems Manager.
D. Run an AWS Systems Manager Automation document to patch the systems every hour
E. Use Amazon EventBridge scheduled events to schedule a patch window.
F. Use AWS Systems Manager Maintenance Windows to schedule a patch window.

Show Suggested Answer

Suggested Answer: ABF 🗳️

by alce2020 at April 15, 2023, 6:17 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

thanhnv142

Highly Voted 1 year, 6 months ago

ABF are the right answers: A: enable hybrid on AWS system manager B: create IAM role for System manager to manage EC2 instances F: use maintenance windows to schedule patching on non-business hours C: incorrect because there is no IAM access keys for on-prem D: should not run patching every hour E: should not use Eventbridge because AWS has its own service to schedule patching

upvoted 9 times

...

DavidPham

Highly Voted 2 years ago

Selected Answer: ABF

ABF is correct

upvoted 5 times

...

spring21

Most Recent 7 months, 3 weeks ago

Selected Answer: ACF

To create IAM access keys for on-premises machines to interact with AWS Systems Manager, you need to: create a dedicated IAM user with the necessary permissions for Systems Manager actions, then generate access keys for that user and securely store them on the on-premises machine; ensure you follow best practices like rotating access keys regularly and using a secure method to distribute them.

upvoted 2 times

...

jamesf

1 year ago

Selected Answer: ABF

ABF are correct https://docs.aws.amazon.com/systems-manager/latest/userguide/activations.html To configure non-EC2 machines for use with AWS Systems Manager in a hybrid and multicloud environment, you create a hybrid activation. Non-EC2 machine types supported as managed nodes include the following: - Servers on your own premises (on-premises servers) - AWS IoT Greengrass core devices - AWS IoT and non-AWS edge devices - Virtual machines (VMs), including VMs in other cloud environments

upvoted 2 times

...

HarryLy

1 year, 2 months ago

ABF is correct

upvoted 1 times

...

Kiroo

2 years, 1 month ago

Selected Answer: AF

https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-managedinstances.html AF are right but the letter B is wrong the role is for non EC2 instances

upvoted 2 times

...