AWS Certified Sysops Administrator Associate · Free Practice Question Medium
Question 43
A SysOps Administrator manages a fleet of Amazon EC2 instances running a distribution of Linux. The operating systems are patched on a schedule using AWS Systems Manager Patch Manager. Users of the application have complained about poor response times when the systems are being patched.
What can be done to ensure patches are deployed automatically with MINIMAL customer impact?
-
A
Update the instances one at a time using a snapshot of a patched Amazon Machine Image (AMI).
-
B
Use separate patch groups and update the groups at different times to spread the updates out.
-
C
Create a patched Amazon Machine Image (AMI). Configure the maintenance window option to deploy the patched AMI on only 10% of the fleet at a time.
-
D
Configure the maintenance window to patch 10% of the instances in the patch group at a time.
Reveal correct answer
Correct answer: D
Explanation
CORRECT: "Configure the maintenance window to patch 10% of the instances in the patch group at a time" is the correct answer.
INCORRECT: "Use separate patch groups and update the groups at different times to spread the updates out" is incorrect. This may not reduce the impact enough unless the rate control is set to lower the number of instances that are patched at the same time.
INCORRECT: "Update the instances one at a time using a snapshot of a patched Amazon Machine Image (AMI)" is incorrect. This is not an automated approach and would only be possible if the applications are stateless or store state on separate volumes to the OS (unknown).
INCORRECT: "Create a patched Amazon Machine Image (AMI). Configure the maintenance window option to deploy the patched AMI on only 10% of the fleet at a time" is incorrect. Patch Manager deploys updates to EC2 instances, it does not replace the AMIs.
References:
Save time with our AWS cheat sheets:
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
