AWS Certified SysOps Administrator – Associate (legacy) — Question 60

A recent audit found that most resources belonging to the Development team were in violation of patch compliance standards. The resources were properly tagged.
Which service should be used to quickly remediate the issue and bring the resources back into compliance?

Answer options

• A. AWS Config
• B. Amazon Inspector
• C. AWS Trusted Advisor
• D. AWS Systems Manager

Correct answer: D

Explanation

AWS Systems Manager is designed to help manage and automate patching of resources, making it the ideal choice to address compliance issues quickly. AWS Config monitors resource configurations but does not directly remediate, Amazon Inspector focuses on security assessments, while AWS Trusted Advisor provides best practice recommendations but does not manage patches.