Exam AWS Certified SysOps Administrator - Associate topic 1 question 303 discussion

Exam question from Amazon's AWS Certified SysOps Administrator - Associate

Question #: 303
Topic #: 1

[All AWS Certified SysOps Administrator - Associate Questions]

A SysOps administrator wants to use AWS Systems Manager Patch Manager to automate the process of patching Amazon EC2 Windows instances. The SysOps administrator wants to ensure that patches are auto-approved 2 days after the release date for development instances. Patches also must be auto-approved 5 days after the release date for production instances. Maintenance must occur only during a 2-hour window for all instances.

Which solution will meet these requirements?

A. Use tags to identify development instances and production instances. In Patch Manager, create two patch groups and one patch baseline. Add an auto-approval delay to each patch group. Create a single maintenance window.
B. Use tags to identify development instances and production instances. In Patch Manager, create two patch groups and two patch baselines. Specify an auto-approval delay in each of the patch baselines. Create a single maintenance window.
C. Use tags to identity development instances and production instances. In Patch Manager, create two patch groups and one patch baseline, Create two separate maintenance windows, each with an auto-approval delay.
D. Use tags to identify development instances. In Patch Manager, create one patch group and one patch baseline. Specify auto-approval delays in the patch baseline, Add development instances to the new patch group. Use predefined Patch Manager patch baselines for all remaining instances. Create a single maintenance window.

Show Suggested Answer

Suggested Answer: B 🗳️

by Gomer at June 10, 2023, 3:29 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Gomer

Highly Voted 1 year ago

Selected Answer: B

Based requirements and my analyzis of link, I concluded "B" was only plausible solution: Two patch groups using same maintenance window (the patch groups defines maintenance Windows) - Development 2-hour maintenance window (same as Production) - Production 2-hour maintenance window (same as Development) Two patch baselines with individual Auto-Approval rules with unique Auto-Approval Delays (the patch baseline defines rules for auto-approving patches, which rules can contain auto-approval delays) - Development Auto-approval Rule to auto-approved 2 days after the release date development instances (unique Auto-Approval Delay) - Producton Production Auto-approval Rule to auto-approved 5 days after the release date development instances (unique Auto-Approval Delay) https://aws.amazon.com/blogs/mt/patching-your-windows-ec2-instances-using-aws-systems-manager-patch-manager/

upvoted 17 times

...

DeaconStJohn

Most Recent 7 months, 2 weeks ago

Selected Answer: B

https://aws.amazon.com/blogs/mt/patching-your-windows-ec2-instances-using-aws-systems-manager-patch-manager/#:~:text=Multi%2Dpatching%20approaches,following%20CLI%20command%3A I originally thought one baseline could be used with multiple rules applied to it. AWS docs highlight this multi patching approach for designated environments.

upvoted 2 times

...

breadops

8 months, 3 weeks ago

Selected Answer: B

B fulfils all requirements

upvoted 2 times

...

jipark

10 months, 2 weeks ago

Selected Answer: B

This solution correctly uses two patch baselines—one for development instances and one for production instances.

upvoted 2 times

...