
Ultimate access to all questions.
A company operating Amazon EC2 instances with Amazon Linux OS must maintain continuous compliance with patient privacy requirements by ensuring that both the OS and applications are regularly patched. The company needs to automate the patch deployment process using both a default and a custom repository. What is the most effective method to achieve this automation?
A
Use AWS Systems Manager to create a new patch baseline including the custom repository. Run the AWS-RunPatchBaseline document using the run command to verify and install patches.
B
Use AWS Direct Connect to integrate the corporate repository and deploy the patches using Amazon CloudWatch scheduled events, then use the CloudWatch dashboard to create reports.
C
Use yum-config-manager to add the custom repository under /etc/yum.repos.d and run yum-config-manager-enable to activate the repository.
D
Use AWS Systems Manager to create a new patch baseline including the corporate repository. Run the AWS-AmazonLinuxDefaultPatchBaseline document using the run command to verify and install patches.
Explanation:
The correct answer is A. AWS Systems Manager allows you to create a new patch baseline that includes custom repositories. By using the AWS-RunPatchBaseline document with the run command, you can verify and install patches for both the operating system and applications, ensuring compliance with the necessary requirements.