A company runs an application with an Amazon EC2 and on-premises configuration. A DevOps engineer needs to standardize patching across both environments. Company policy dictates that patching only happens during non-business hours.
Which combination of actions will meet these requirements? (Choose three.)
Suggested Answer: A, B, F
Get Premium DOP-C02 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
CA
Caprice
11 months ago
I disagree with D, running it every hour seems excessive.
ED
Edna
12 months ago
F is the best way to handle maintenance windows, no doubt!
PA
Pamella
12 months ago
Wait, can you really use IAM access keys for on-prem machines? Sounds risky.
ER
Erasmo
1 year ago
I think E is a must too for scheduling.
AL
Alline
1 year ago
Definitely A and B are needed for management!
YO
Yolando
1 year ago
I practiced a similar question, and I think adding physical machines into Systems Manager is important, but I’m uncertain about the frequency of the patching.
AR
Aretha
1 year ago
I feel like using Maintenance Windows is the right approach for scheduling patches, but I can't recall if EventBridge is also necessary.
MA
Mariann
1 year ago
I think we definitely need to attach an IAM role to the EC2 instances. That seems like a crucial step for management.
GL
Glenn
1 year ago
I remember we discussed using AWS Systems Manager for patching, but I'm not sure if we need to create IAM access keys for on-premises machines.
TA
Tamra
1 year ago
I think the real-time scan would consume the most resources since it's constantly monitoring the system for threats.
AA
Aaron
1 year ago
Okay, I think I've got a strategy here. I'll focus on looking for the statement that indicates the security threats are becoming more advanced or complex.
CH
Charlie
1 year ago
I'm a little confused by this question. The Product Owner has a lot of responsibilities, and I'm not entirely sure which ones are included or excluded. I'll have to review my notes and try to eliminate the options that don't seem to fit.
CA
Carli
1 year ago
I'm feeling confident about this one. When an email is from a safelist domain, the antivirus scanning process is usually skipped, as the email is considered low-risk. I'll select option B.