Examkin

Soru

Zorluk: Çok zorAWS Management, Governance, and Developer Tools

A financial services company needs to establish a continuous governance and compliance strategy for its Amazon EC2 instance fleet. The operations team has two key requirements: first, they must automatically detect and report when any instance's resource configurations deviate from internal security standards; second, they must orchestrate and execute software patching across the entire fleet during specific, low-traffic time windows.

Which of the following AWS services should be selected to implement this solution? (Select TWO.)

  1. AWS ConfigCevap
  2. AWS Systems ManagerCevap
  3. C
    AWS CloudFormation
  4. D
    AWS Elastic Beanstalk
  5. E
    AWS CloudTrail

Cevap

AWS Config and AWS Systems Manager are the correct choices.
AWS Config and AWS Systems Manager satisfy the requirements. AWS Config allows the continuous auditing and compliance monitoring of resource configurations. AWS Systems Manager, via Patch Manager and Maintenance Windows, automates the patching of operating systems during low-traffic windows.

Adım Adım Çözüm

1
Analyze the requirement for automatic configuration drift detection and compliance auditing.
Identify that AWS Config continuously monitors and records configuration changes and evaluates them against defined rules.
AWS Config is specifically built to assess, audit, and evaluate resource configurations.
2
Analyze the requirement for orchestrating and automating software patching within scheduled time windows.
Identify that AWS Systems Manager (using Patch Manager and Maintenance Windows) is the appropriate tool.
AWS Systems Manager simplifies resource and application management, shortens maintenance windows, and automates OS patch execution.
3
Evaluate and rule out incorrect management and provisioning services.
Eliminate AWS CloudFormation, AWS Elastic Beanstalk, and AWS CloudTrail as they do not support operational OS-level patching or runtime configuration compliance auditing.
Each of these services serves a different primary function such as infrastructure provisioning, application deployment, or API activity logging.

Anahtar Kavram

Selecting appropriate AWS management and governance tools based on operational compliance and patching requirements.
Bu soruyu puanla

Konular

AWS Management, Governance, and Developer Tools

Bu konudan daha fazla soru