DOP-C02 Question 101
Select 3You are tasked with deploying and managing a fleet of EC2 instances across multiple environments (development, staging, production). The instances require consistent system configurations, such as installed software, security patches, and custom application settings. Which combination of AWS services and strategies should you use to implement a scalable and maintainable configuration management solution?
- A
Use AWS Systems Manager State Manager to define and enforce desired state configurations across all instances.
- B
Implement configuration scripts manually on each instance using SSH to ensure consistent settings.
- C
Leverage AWS Systems Manager Parameter Store to centrally manage and retrieve configuration settings securely.
- D
Create custom Amazon Machine Images (AMIs) with pre-configured settings for each environment and use them to launch EC2 instances.
- E
Use AWS Config to deploy configuration changes directly to your EC2 instances.
Show answer and explanation
Correct answers: A, C, D
Explanation
The correct combination of AWS services and strategies involves using AWS Systems Manager State Manager to automate and enforce configuration management, AWS Systems Manager Parameter Store for securely managing configuration data, and custom AMIs to ensure consistency across environments. These approaches align with best practices for scalable, automated, and maintainable configuration management. Manually applying configurations using SSH is not scalable, and AWS Config is not a configuration deployment tool but rather a compliance monitoring service.
- A. Correct.
Correct: AWS Systems Manager State Manager is a powerful tool for defining and enforcing desired state configurations across your fleet of instances. It ensures consistency and allows for automation at scale.
- B. Incorrect.
Incorrect: Manually applying configuration scripts via SSH is error-prone, not scalable, and not aligned with best practices for DevOps or configuration management.
- C. Correct.
Correct: AWS Systems Manager Parameter Store allows you to centrally store, manage, and retrieve configuration data securely, making it an essential component of a configuration management strategy.
- D. Correct.
Correct: Creating custom AMIs with pre-configured settings ensures consistency across instances and reduces the need for repetitive configuration tasks after launch.
- E. Incorrect.
Incorrect: AWS Config is designed to monitor and assess compliance with configuration rules but is not a tool for directly deploying or managing configuration changes to instances.