AWS Certified Solutions Architect - Professional
Get started today
Ultimate access to all questions.
A Solutions Architect must establish a patching plan for a large mixed fleet of Windows and Linux servers. The patching plan must be implemented securely, be audit ready, and comply with the company's business requirements. Which option will meet these requirements with MINIMAL effort?
Exam-Like
A
Install and use an OS-native patching service to manage the update frequency and release approval for all instances. Use AWS Config to verify the OS state on each instance and report on any patch compliance issues.
B
Use AWS Systems Manager on all instances to manage patching. Test patches outside of production and then deploy during a maintenance window with the appropriate approval.
C
Use AWS OpsWorks for Chef Automate to run a set of scripts that will iterate through all instances of a given type. Issue the appropriate OS command to get and install updates on each instance, including any required restarts during the maintenance window.
D
Migrate all applications to AWS OpsWorks and use OpsWorks automatic patching support to keep the OS up-to-date following the initial installation. Use AWS Config to provide audit and compliance reporting.
Explanation:
A.AWS Config cannot monitor OS state C.For OpsWorks the suggested way is to replace the old instance and during the setup security updates will be applied https://docs.aws.amazon.com/opsworks/latest/userguide/workingsecurity-updates.html D.OpsWork automatic patching only update the instance on setup https://docs.aws.amazon.com/opsworks/latest/ userguide/workingsecurity- updates.html
Comments
Loading comments...