AWS Certified Sysops Administrator Associate · Free Practice Question Medium
Question 1
A security vulnerability has been discovered that impacts a version of Linux that is running on some Amazon EC2 instances in a VPC. How can a SysOps Administrator mitigate the exposure with the LEAST disruption?
-
A
Use AWS Systems Manager to patch the Linux operating systems.
-
B
Shut down and then restart the instances so they change underlying hosts.
-
C
Redeploy the EC2 instances using an updated AMI through AWS CloudFormation.
-
D
Use Amazon Inspector to produce a report with best practice recommendations.
Reveal correct answer
Correct answer: A
Explanation
AWS Systems Manager Patch Manager automates the process of patching managed instances with both security related and other types of updates. You can use Patch Manager to apply patches for both operating systems and applications.
CORRECT: "Use AWS Systems Manager to patch the Linux operating systems" is the correct answer.
INCORRECT: "Shut down and then restart the instances so they change underlying hosts" is incorrect. The vulnerability is with the EC2 instance OS so moving hosts will not change anything.
INCORRECT: "Use Amazon Inspector to produce a report with best practice recommendations" is incorrect. This will not mitigate the exposure.
INCORRECT: "Redeploy the EC2 instances using an updated AMI through AWS CloudFormation" is incorrect. This would cause more disruption than patching the existing EC2 instances.
References:
https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-patch.html
Save time with our AWS cheat sheets:
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
