SOA-C02 Question 159
Single answerYour team is tasked with ensuring that all EC2 instances in your environment are automatically patched for critical security updates each month. You want to implement a solution that minimizes manual effort and provides detailed compliance reporting. Which approach should you use to achieve this?
- A
Use AWS Systems Manager Patch Manager to create a patch baseline and schedule patching using a Maintenance Window.
- B
Manually install patches on all EC2 instances using SSH and a custom script.
- C
Use an Auto Scaling Group to replace instances monthly with new, pre-patched AMIs.
- D
Enable automatic updates by configuring the operating system's native package manager on each EC2 instance.
Show answer and explanation
Correct answer: A
Explanation
The most efficient and scalable way to implement automated patch management for EC2 instances is to use AWS Systems Manager Patch Manager. It allows you to define patch baselines, schedule patching using Maintenance Windows, and provides detailed compliance reporting. This approach fulfills the requirement of minimizing manual effort while ensuring instances are patched for critical updates.
- A. Correct.
AWS Systems Manager Patch Manager allows you to automate patching across EC2 instances using patch baselines and Maintenance Windows, ensuring compliance and reducing manual effort.
- B. Incorrect.
Manually installing patches is time-consuming, error-prone, and does not scale well in large environments.
- C. Incorrect.
Replacing instances with pre-patched AMIs is inefficient and does not provide detailed compliance reporting, which is a requirement in this scenario.
- D. Incorrect.
While enabling automatic updates via the OS package manager can help with patching, it does not provide centralized control, automation, or compliance reporting.