Amazon DOP-C02 Exam - Topic 2 Question 49 Discussion

Actual exam question for Amazon's DOP-C02 exam

Question #: 49
Topic #: 2

A company is using AWS Organizations to create separate AWS accounts for each of its departments The company needs to automate the following tasks

* Update the Linux AMIs with new patches periodically and generate a golden image

* Install a new version to Chef agents in the golden image, is available

* Provide the newly generated AMIs to the department's accounts

Which solution meets these requirements with the LEAST management overhead'?

AWrite a script to launch an Amazon EC2 instance from the previous golden image Apply the patch updates Install the new version of the Chef agent, generate a new golden image, and then modify the AMI permissions to share only the new image with the department's accounts.

BUse Amazon EC2 Image Builder to create an image pipeline that consists of the base Linux AMI and components to install the Chef agent Use AWS Resource Access Manager to share EC2 Image Builder images with the department's accounts

CUse an AWS Systems Manager Automation runbook to update the Linux AMI by using the previous image Provide the URL for the script that will update the Chef agent Use AWS Organizations to replace the previous golden image in the department's accounts.

DUse Amazon EC2 Image Builder to create an image pipeline that consists of the base Linux AMI and components to install the Chef agent Create a parameter in AWS Systems Manager Parameter Store to store the new AMI ID that can be referenced by the department's accounts

Show Suggested Answer

Suggested Answer: B

Amazon EC2 Image Builder is a service that automates the creation, management, and deployment of customized, secure, and up-to-date server images that are pre-installed with software and configuration settings tailored to meet specific IT standards. EC2 Image Builder simplifies the creation and maintenance of golden images, and makes it easy to generate images for multiple platforms, such as Amazon EC2 and on-premises. EC2 Image Builder also integrates with AWS Resource Access Manager, which allows you to share your images across accounts within your organization or with external AWS accounts. This solution meets the requirements of automating the tasks of updating the Linux AMIs, installing the Chef agent, and providing the images to the department's accounts with the least management overhead.Reference:

Amazon EC2 Image Builder

Sharing EC2 Image Builder images

by Celeste at Jun 13, 2025, 04:36 AM

Limited Time Offer

25%

Off

Get Premium DOP-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lai

2 months ago

D is interesting, but does it really reduce management overhead?

upvoted 0 times

...

Val

2 months ago

Wait, are we really trusting AWS Image Builder for everything?

upvoted 0 times

...

Royal

3 months ago

C seems like it could work, but I'm not sure about the overhead.

upvoted 0 times

...

Krissy

3 months ago

I think A sounds simpler, though.

upvoted 0 times

...

Fanny

3 months ago

B is definitely the way to go for automation!

upvoted 0 times

...

Roxane

3 months ago

I feel like option C could work too, but using a runbook sounds like it might add more complexity. I thought we were looking for the least management overhead.

upvoted 0 times

...

Viva

4 months ago

I'm a bit confused about the differences between options B and D. Both mention Image Builder, but I'm not clear on how the parameter store fits into the requirements.

upvoted 0 times

...

Una

4 months ago

I think option B is the best choice since it mentions using Image Builder and Resource Access Manager, which could simplify the sharing process. I practiced a similar question about image management last week.

upvoted 0 times

...

Tish

4 months ago

I remember studying about EC2 Image Builder, and it seems like a good fit for automating AMI updates. But I'm not sure if it handles sharing with other accounts directly.

upvoted 0 times

...

Carlene

4 months ago

Option C with the Systems Manager Automation runbook seems interesting, but I'm not sure how much manual intervention would still be required compared to the other options. I'd want to dig into the details of that approach a bit more.

upvoted 0 times

...

Dierdre

4 months ago

I'm leaning towards option D. Using EC2 Image Builder to create the pipeline and then storing the new AMI ID in SSM Parameter Store seems like it would be the most hands-off approach for the company.

upvoted 0 times

...

Magdalene

5 months ago

Based on the details provided, I think option B using EC2 Image Builder and AWS Resource Access Manager is the way to go. It sounds like it would handle the entire process of updating the AMI and sharing it with the department accounts automatically.

upvoted 0 times

...

Shizue

5 months ago

Hmm, I'm a bit confused on the difference between the options. They all seem to involve using AWS services to automate the process, but I'm not sure which one would have the least management overhead.

upvoted 0 times

...

Shawna

5 months ago

This seems like a pretty straightforward question. I think the key is to find the solution that requires the least management overhead, which is what the question is asking for.

upvoted 0 times

...

Judy

8 months ago

I don't know, Option A just feels like a lot of manual steps. Who wants to be updating AMI permissions by hand these days?

upvoted 0 times

Darrin

7 months ago

I agree, Option B definitely reduces the manual steps and management overhead compared to Option A.

upvoted 0 times

...

Rory

7 months ago

Option B seems like the best choice. Using Amazon EC2 Image Builder to automate the process and AWS Resource Access Manager to share the images with departments is more efficient.

upvoted 0 times

...

Sommer

8 months ago

I'm not sure, option D also looks promising with the use of AWS Systems Manager Parameter Store to store the new AMI ID for easy reference.

upvoted 0 times

...

Honey

8 months ago

Hmm, Option C seems a bit convoluted. Automating the update process and then replacing the golden image in each account? Sounds like a lot of manual work.

upvoted 0 times

Chi

7 months ago

Yeah, Option C does seem a bit complicated. It might involve more manual work than necessary.

upvoted 0 times

...

Julianna

7 months ago

I agree, Option B also looks promising. Using EC2 Image Builder and Resource Access Manager can streamline the process of sharing the new images.

upvoted 0 times

...

Dyan

8 months ago

Option A seems like the best choice. It automates the patch updates and Chef agent installation, and only shares the new image with the department's accounts.

upvoted 0 times

...

Jenelle

8 months ago

Option B is the way to go, no doubt. The other options are just too 'old school' for this modern cloud-powered world.

upvoted 0 times

Delmy

8 months ago

I agree, Option B is the most modern and streamlined solution for managing the AWS accounts and updating the AMIs.

upvoted 0 times

...

Ronna

8 months ago

Option B is definitely the most efficient choice. Using Amazon EC2 Image Builder and AWS Resource Access Manager will streamline the process.

upvoted 0 times

...

Allene

9 months ago

Option D? More like 'Option Doh!' amirite? Parameter Store? What is this, the Stone Age?

upvoted 0 times

Veta

7 months ago

D) Use Amazon EC2 Image Builder to create an image pipeline that consists of the base Linux AMI and components to install the Chef agent Create a parameter in AWS Systems Manager Parameter Store to store the new AMI ID that can be referenced by the department's accounts

upvoted 0 times

...

Lashaun

8 months ago

C) Use an AWS Systems Manager Automation runbook to update the Linux AMI by using the previous image Provide the URL for the script that will update the Chef agent Use AWS Organizations to replace the previous golden image in the department's accounts.

upvoted 0 times

...

Cory

8 months ago

B) Use Amazon EC2 Image Builder to create an image pipeline that consists of the base Linux AMI and components to install the Chef agent Use AWS Resource Access Manager to share EC2 Image Builder images with the department's accounts.

upvoted 0 times

...

Elfriede

8 months ago

A) Write a script to launch an Amazon EC2 instance from the previous golden image Apply the patch updates Install the new version of the Chef agent, generate a new golden image, and then modify the AMI permissions to share only the new image with the department's accounts.

upvoted 0 times

...

Marta

9 months ago

I agree with Von, option B seems like the most efficient solution with the least management overhead.

upvoted 0 times

...

Von

9 months ago

I think option B is the best choice because it uses Amazon EC2 Image Builder to automate the process and AWS Resource Access Manager to share the images.

upvoted 0 times

...