SAP-C02 Question 433
Select 3You are an AWS Solutions Architect managing an organization's infrastructure that includes Amazon EC2 instances running critical applications. The organization has strict compliance requirements mandating that all operating systems and software must be regularly patched to address security vulnerabilities. Which of the following are the best practices for ensuring compliance with these patching requirements on AWS?
- A
Use AWS Systems Manager Patch Manager to automate patching of EC2 instances and maintain compliance.
- B
Create an Auto Scaling group that replaces EC2 instances with new instances containing pre-configured patches.
- C
Manually log in to each EC2 instance and install updates to ensure patches are applied immediately.
- D
Schedule a maintenance window in AWS Systems Manager to apply patches during non-business hours.
- E
Enable automatic updates for Amazon Linux and Windows Server operating systems in EC2.
Show answer and explanation
Correct answers: A, D, E
Explanation
To ensure compliance with patching requirements on AWS, best practices include automating the patching process using AWS Systems Manager Patch Manager, scheduling maintenance windows for controlled updates, and enabling automatic updates for supported operating systems. These methods reduce manual effort, improve consistency, and ensure timely application of patches while minimizing disruptions to operations.
- A. Correct.
Using AWS Systems Manager Patch Manager is a best practice for automating the patching process, ensuring compliance, and maintaining a consistent patching schedule.
- B. Incorrect.
Creating an Auto Scaling group with pre-configured patched instances is not an efficient or scalable strategy for regular patching, as it involves repeatedly replacing instances rather than updating them.
- C. Incorrect.
Manually logging in to each EC2 instance for patching is time-consuming, error-prone, and does not align with AWS best practices for automation.
- D. Correct.
Scheduling a maintenance window in AWS Systems Manager ensures patches are applied during predefined times, minimizing disruption to critical workloads.
- E. Correct.
Enabling automatic updates for Amazon Linux and Windows Server ensures the operating systems are up-to-date with minimal manual intervention, aligning with best practices for patching.