AWS Certified SysOps Administrator – Associate (SOA-C03) — Question 12

A company must ensure that all Amazon EC2 Windows instances that are launched in an AWS account have a third-party agent installed. The company uses AWS Systems Manager, and the Windows instances are tagged appropriately. The company must deploy periodic updates to the third-party agent when the updates become available.
Which combination of steps will meet these requirements with the LEAST operational effort? (Choose two.)

Answer options

• A. Create a Systems Manager Distributor package for the third-party agent.
• B. Create a Systems Manager OpsItem that includes the tag value for Windows. Attach the Systems Manager inventory to the OpsItem.
• C. Create an AWS Lambda function. Program the Lambda function to log in to each instance and to install or update the third-party agent as needed.
• D. Create a Systems Manager State Manager association to run the AWS-RunRemoteScript document Populate the details of the third-party agent package.
• E. Create a Systems Manager State Manager association to run the AWS-ConfigureAWSPackage document. Populate the details of the third-party agent package. Specify instance tags based on the appropriate tag value for Windows.

Correct answer: A, E

Explanation

Option A is correct because creating a Systems Manager Distributor package allows you to deploy the third-party agent efficiently. Option E is also correct as it uses the AWS-ConfigureAWSPackage document to ensure that the correct package is installed based on the specified tags. The other options either involve more manual effort or do not directly address the requirement of installing and updating the agent with minimal operational overhead.