SCS-C02 Question 241
Select 3A company needs to ensure their Amazon EC2 instances running a critical application are always patched with the latest security updates. The security team also wants to automate the creation of backups for these instances to meet compliance requirements. Which combination of solutions should the company implement to achieve these goals?
- A
Use Systems Manager Patch Manager to automate the patching of EC2 instances.
- B
Manually log in to each EC2 instance and apply updates as needed.
- C
Use EC2 Image Builder to create and maintain custom AMIs with up-to-date patches.
- D
Use Amazon Data Lifecycle Manager (DLM) to automate the creation of snapshots for EC2 instances.
- E
Install a third-party patch management tool on the EC2 instances.
Show answer and explanation
Correct answers: A, C, D
Explanation
The combination of AWS Systems Manager Patch Manager, EC2 Image Builder, and Amazon Data Lifecycle Manager provides a comprehensive and automated solution for patching, creating backups, and maintaining security compliance for EC2 instances. These services are native to AWS, cost-effective, and well-integrated, making them the ideal choice for the given scenario.
- A. Correct.
Correct: Systems Manager Patch Manager is a native AWS service that automates the patching process for EC2 instances, ensuring security updates are applied with minimal manual intervention.
- B. Incorrect.
Incorrect: Manually logging in to each EC2 instance is time-consuming, error-prone, and does not scale well. It is not recommended for automating patch management.
- C. Correct.
Correct: EC2 Image Builder can be used to create and maintain AMIs that include the latest patches, ensuring that newly launched EC2 instances are secure and up-to-date.
- D. Correct.
Correct: Amazon Data Lifecycle Manager (DLM) is designed to automate the creation and management of snapshots, which can be used for backups and disaster recovery.
- E. Incorrect.
Incorrect: While third-party tools might offer patch management, AWS provides native services like Systems Manager Patch Manager and EC2 Image Builder, which are more cost-effective and integrate seamlessly into the AWS ecosystem.