Examkin

Question

Difficulty: MediumPatch Management and OS Compliance Automation

A company manages a fleet of hybrid Amazon EC2 instances and on-premises physical servers running Red Hat Enterprise Linux (RHEL). A SysOps Administrator is configuring AWS Systems Manager Patch Manager to automate patch installations on these managed nodes using a custom patch baseline. The administrator has already registered the on-premises servers as managed nodes using hybrid activations and tagged all target nodes with the key 'Patch Group' and value 'Production-RHEL'. Which of the following actions must the SysOps Administrator perform to ensure that patches are successfully applied to all managed nodes during a scheduled maintenance window? (Select TWO.)

  1. Associate the custom patch baseline with the patch group 'Production-RHEL' within Systems Manager Patch Manager.Answer
  2. Register a target with the Maintenance Window using the 'Patch Group' tag key and value 'Production-RHEL', then assign the AWS-RunPatchBaseline task to that target.Answer
  3. C
    Assign the AWS-RunPatchBaseline task to the Maintenance Window, and ensure the administrator's IAM policy contains only the iam:AssumeRole permission for the execution role.
  4. D
    Modify the custom patch baseline by adding the tag key 'patch-group' with the value 'Production-RHEL' using lowercase characters.
  5. E
    Configure the Maintenance Window targets using a Resource Group that queries nodes containing the tag key 'Patch_Group' to bypass case sensitivity constraints.

Answer

Associate the custom patch baseline with the patch group 'Production-RHEL' within Systems Manager Patch Manager, and register a target with the Maintenance Window using the 'Patch Group' tag key and value 'Production-RHEL', then assign the AWS-RunPatchBaseline task to that target.
To apply the custom patch baseline to the RHEL fleet, the administrator must map the baseline to the 'Production-RHEL' patch group. Additionally, the administrator must define a target in the Maintenance Window utilizing the exact, case-sensitive tag key 'Patch Group' and assign the 'AWS-RunPatchBaseline' task to orchestrate execution.

Step-by-Step Solution

1
Register the patch group with the custom baseline.
The baseline is associated with the 'Production-RHEL' group.
This guarantees that when Patch Manager runs, it knows which update rules to apply to the Red Hat Enterprise Linux nodes.
2
Configure the Maintenance Window target.
The target definition is configured using the 'Patch Group' key with 'Production-RHEL' as the value.
This correctly groups both the EC2 instances and registered hybrid on-premises nodes for execution.
3
Assign the AWS-RunPatchBaseline task to the Maintenance Window targets.
The patching command is scheduled to run on the targeted nodes.
The task executes the SSM document that orchestrates the download and installation of patches.

Key Concept

Patch Groups and Maintenance Window Orchestration
Rate this question

Topics

Patch Management and OS Compliance Automation

More questions from this topic