AWS Certified Cloud Practitioner — Question 761

A company has an environment that includes Amazon EC2 instances, Amazon Lightsail, and on-premises servers. The company wants to automate the security updates for its operating systems and applications.

Which solution will meet these requirements with the LEAST operational effort?

Answer options

• A. Use AWS Shield to identify and manage security events.
• B. Connect to each server by using a remote desktop connection. Run an update script.
• C. Use the AWS Systems Manager Patch Manager capability.
• D. Schedule Amazon GuardDuty to run on a nightly basis.

Correct answer: C

Explanation

AWS Systems Manager Patch Manager is designed to automate the process of patching both cloud-based and on-premises servers, requiring minimal operational effort. AWS Shield and Amazon GuardDuty are security monitoring and threat detection services, respectively, and do not handle software updates. Manually connecting to each server to run scripts is highly inefficient and does not meet the requirement for automation with the least effort.