AWS Certified DevOps Engineer – Professional — Question 28

A company is using Amazon EC2 for various workloads. Company policy requires that instances be managed centrally to standardize configurations. These configurations include standard logging, metrics, security assessments, and weekly patching.
How can the company meet these requirements? (Choose three.)

Answer options

• A. Use AWS Config to ensure all EC2 instances are managed by Amazon Inspector.
• B. Use AWS Config to ensure all EC2 instances are managed by AWS Systems Manager.
• C. Use AWS Systems Manager to install and manage Amazon Inspector, Systems Manager Patch Manager, and the Amazon CloudWatch agent on all instances.
• D. Use Amazon Inspector to install and manage AWS Systems Manager, Systems Manager Patch Manager, and the Amazon CloudWatch agent on all instances.
• E. Use AWS Systems Manager maintenance windows with Systems Manager Run Command to schedule Systems Manager Patch Manager tasks. Use the Amazon CloudWatch agent to schedule Amazon Inspector assessment runs.
• F. Use AWS Systems Manager maintenance windows with Systems Manager Run Command to schedule Systems Manager Patch Manager tasks. Use Amazon CloudWatch Events to schedule Amazon Inspector assessment runs.

Correct answer: B, C, F

Explanation

The correct options B, C, and F allow the company to manage EC2 instances centrally with AWS Systems Manager, ensuring standardized configurations. Option A is incorrect as Amazon Inspector is not meant to manage EC2 instances, and option D suggests using Amazon Inspector for management, which is not its purpose. Options E is incorrect because it doesn't utilize Amazon CloudWatch Events for scheduling assessments.