Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Amazon DOP-C02 Exam - Topic 8 Question 9 Discussion

A company deploys its corporate infrastructure on AWS across multiple AWS Regions and Availability Zones. The infrastructure is deployed on Amazon EC2 instances and connects with AWS loT Greengrass devices. The company deploys additional resources on on-premises servers that are located in the corporate headquarters.The company wants to reduce the overhead involved in maintaining and updating its resources. The company's DevOps team plans to use AWS Systems Manager to implement automated management and application of patches. The DevOps team confirms that Systems Manager is available in the Regions that the resources are deployed m Systems Manager also is available in a Region near the corporate headquarters.Which combination of steps must the DevOps team take to implement automated patch and configuration management across the company's EC2 instances loT devices and on-premises infrastructure? (Select THREE.)
C) Use Systems Manager Patch Manager to schedule patching loT the EC2 instances AWS loT Greengrass devices and on-premises servers as a Systems Manager maintenance window task. and E) Create an IAM instance profile for Systems Manager Attach the instance profile to all the EC2 instances in the AWS account. For the AWS loT Greengrass devices and on-premises servers create an IAM service role for Systems Manager. and F) Generate a managed-instance activation Use the Activation Code and Activation ID to install Systems Manager Agent (SSM Agent) on each server in the on-premises environment Update the AWS loT Greengrass IAM token exchange role Use the role to deploy SSM Agent on all the loT devices. https://aws.amazon.com/blogs/mt/how-to-centrally-manage-aws-iot-greengrass-devices-using-aws-systems-manager/?force_isolation=true
A) Apply tags lo all the EC2 instances. AWS loT Greengrass devices, and on-premises servers. Use Systems Manager Session Manager to push patches to all the tagged devices.
B) Use Systems Manager Run Command to schedule patching for the EC2 instances AWS loT Greengrass devices and on-premises servers.
D) Configure Amazon EventBridge to monitor Systems Manager Patch Manager for updates to patch baselines. Associate Systems Manager Run Command with the event lo initiate a patch action for all EC2 instances AWS loT Greengrass devices and on-premises servers.

Amazon DOP-C02 Exam - Topic 8 Question 9 Discussion

Actual exam question for Amazon's DOP-C02 exam
Question #: 9
Topic #: 8
[All DOP-C02 Questions]

A company deploys its corporate infrastructure on AWS across multiple AWS Regions and Availability Zones. The infrastructure is deployed on Amazon EC2 instances and connects with AWS loT Greengrass devices. The company deploys additional resources on on-premises servers that are located in the corporate headquarters.

The company wants to reduce the overhead involved in maintaining and updating its resources. The company's DevOps team plans to use AWS Systems Manager to implement automated management and application of patches. The DevOps team confirms that Systems Manager is available in the Regions that the resources are deployed m Systems Manager also is available in a Region near the corporate headquarters.

Which combination of steps must the DevOps team take to implement automated patch and configuration management across the company's EC2 instances loT devices and on-premises infrastructure? (Select THREE.)

Show Suggested Answer Hide Answer
Suggested Answer: C, E, F

Contribute your Thoughts:

0/2000 characters
Hailey
6 months ago
I disagree, tagging all instances seems unnecessary for patching.
upvoted 0 times
...
Marsha
7 months ago
Definitely need to create those IAM roles for proper access!
upvoted 0 times
...
Cecily
7 months ago
Wait, can you really use Systems Manager with on-prem servers?
upvoted 0 times
...
Alisha
7 months ago
I think using Run Command is the best way to go.
upvoted 0 times
...
Cherelle
7 months ago
Systems Manager is great for automating patch management!
upvoted 0 times
...
Aileen
7 months ago
I think we should definitely generate a managed-instance activation for the on-premises servers. That seems crucial for getting the SSM Agent installed correctly.
upvoted 0 times
...
Art
8 months ago
I’m a bit confused about whether we need to create an IAM instance profile for Systems Manager. I feel like that might be important for the EC2 instances, but what about the IoT devices?
upvoted 0 times
...
Karol
8 months ago
I remember a practice question that mentioned using Run Command for patching EC2 instances, so I feel like option B could be a good choice here.
upvoted 0 times
...
Rosendo
8 months ago
I think we definitely need to use Systems Manager Patch Manager for scheduling patches, but I'm not sure if we should also apply tags to all instances.
upvoted 0 times
...
Lou
8 months ago
Hmm, this looks like a tricky one. I'll need to carefully analyze the information provided in the exhibit and think through the shared-explicit reservation style.
upvoted 0 times
...
Dean
8 months ago
Hmm, this looks like a tricky one. I'll need to carefully read through the details and think through the logging configuration to determine the correct result.
upvoted 0 times
...
Corrina
8 months ago
Okay, I think I've got this. I need to go to the security area, select the 'Accountant Closing' role, and then manually assign Theresa Jayne to that role for the USMF legal entity.
upvoted 0 times
...

Save Cancel