Exam AWS-SysOps topic 1 question 766 discussion

Exam question from Amazon's AWS-SysOps

Question #: 766
Topic #: 1

A security researcher has published a new Common Vulnerabilities and Exposures (CVE) report that impacts a popular operating system. A SysOps Administrator is concerned with the new CVE report and wants to patch the company's systems immediately. The administrator contacts AWS Support and requests the patch be applied to all Amazon EC2 instances.
How will AWS respond to this request?

A. AWS will apply the patch during the next maintenance window, and will provide the Administrator with a report of all patched EC2 instances.
B. AWS will relaunch the EC2 instances with the latest version of the Amazon Machine Image (AMI), and will provide the Administrator with a report of all patched EC2 instances.
C. AWS will research the vulnerability to see if the Administrator's operating system is impacted, and will patch the EC2 instances that are affected.
D. AWS will review the shared responsibility model with the Administrator and advise them regarding how to patch the EC2 instances.

Show Suggested Answer

Suggested Answer: D 🗳️

by nicat at May 8, 2020, 3:24 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

AWS_Noob

Highly Voted 2 years, 7 months ago

D - The OS falls under the clients responsibility. Systems manager will be an easy way to patch the instances

upvoted 20 times

...

albert_kuo

Most Recent 9 months, 3 weeks ago

Selected Answer: D

AWS follows the shared responsibility model, where AWS is responsible for the underlying infrastructure and the customer (Administrator) is responsible for managing and securing their applications, operating systems, and software running on the EC2 instances. As such, it is the responsibility of the Administrator to apply patches and updates to their EC2 instances. AWS Support will assist the Administrator by providing guidance on how to patch the EC2 instances, including best practices and recommended approaches. They may provide documentation or point the Administrator to relevant resources to help them address the specific vulnerability. It's important for the Administrator to actively manage their systems and apply patches promptly to maintain the security of their environment and protect against known vulnerabilities.

upvoted 1 times

...