AWS Certified DevOps Engineer – Professional — Question 112

A company that uses electronic health records is running a fleet of Amazon EC2 instances with an Amazon Linux operating system. As part of patient privacy requirements, the company must ensure continuous compliance for patches for operating system and applications running on the EC2 instances.

How can the deployments of the operating system and application patches be automated using a default and custom repository?

Answer options

• A. Use AWS Systems Manager to create a new patch baseline including the custom repository. Run the AWS-RunPatchBaseline document using the run command to verify and install patches.
• B. Use AWS Direct Connect to integrate the corporate repository and deploy the patches using Amazon CloudWatch scheduled events, then use the CloudWatch dashboard to create reports.
• C. Use yum-config-manager to add the custom repository under /etc/yum.repos.d and run yum-config-manager-enable to activate the repository.
• D. Use AWS Systems Manager to create a new patch baseline including the corporate repository. Run the AWS-AmazonLinuxDefaultPatchBaseline document using the run command to verify and install patches.

Correct answer: A

Explanation

The correct answer is A because AWS Systems Manager is designed to manage and automate patching tasks effectively, allowing for the inclusion of custom repositories in the patch baseline. Options B and C do not specifically address the automation of patching in the context of AWS Systems Manager, while option D mentions a corporate repository instead of a custom one, which does not align with the requirements.