Exam AWS Certified DevOps Engineer - Professional DOP-C02 topic 1 question 154 discussion

Exam question from Amazon's AWS Certified DevOps Engineer - Professional DOP-C02

Question #: 154
Topic #: 1

[All AWS Certified DevOps Engineer - Professional DOP-C02 Questions]

A company is using AWS Organizations to create separate AWS accounts for each of its departments. The company needs to automate the following tasks:

• Update the Linux AMIs with new patches periodically and generate a golden image
• Install a new version of Chef agents in the golden image, if available
• Provide the newly generated AMIs to the department's accounts

Which solution meets these requirements with the LEAST management overhead?

A. Write a script to launch an Amazon EC2 instance from the previous golden image. Apply the patch updates. Install the new version of the Chef agent, generate a new golden image, and then modify the AMI permissions to share only the new image with the department's accounts.
B. Use Amazon EC2 Image Builder to create an image pipeline that consists of the base Linux AMI and components to install the Chef agent. Use AWS Resource Access Manager to share EC2 Image Builder images with the department's accounts.
C. Use an AWS Systems Manager Automation runbook to update the Linux AMI by using the previous image. Provide the URL for the script that will update the Chef agent. Use AWS Organizations to replace the previous golden image in the department's accounts.
D. Use Amazon EC2 Image Builder to create an image pipeline that consists of the base Linux AMI and components to install the Chef agent. Create a parameter in AWS Systems Manager Parameter Store to store the new AMI ID that can be referenced by the department's accounts.

Show Suggested Answer

Suggested Answer: B 🗳️

by PrasannaBalaji at Dec. 29, 2023, 1:09 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

thanhnv142

Highly Voted 10 months, 3 weeks ago

Selected Answer: B

B is correct: <generate a golden image> means we need EC2 image builder for an automated pipeline to build a golden image A and C: no mention of EC2 image builder D: This option utilizes SSM to share the image, which is not correct. We need AWS resource sharing to share resources cross-account

upvoted 5 times

...

d262e67

Highly Voted 1 year ago

Selected Answer: B

Builder Image to streamline the AMI baking process and use RAM to easily share the AMI among the whole organization or select accounts. https://docs.aws.amazon.com/imagebuilder/latest/userguide/manage-shared-resources.html#manage-shared-resources-using

upvoted 5 times

...

Srikantha

Most Recent 3 months ago

Selected Answer: D

it automates the AMI creation process and provides a low-maintenance way for departments to access the latest AMI ID.

upvoted 2 times

...

c3518fc

8 months, 1 week ago

Selected Answer: B

By leveraging EC2 Image Builder and RAM, solution B provides a fully automated and centralized approach to creating, updating, and sharing golden images with the department's accounts, minimizing manual effort and management overhead.

upvoted 4 times

...