An application runs across Amazon EC2 and on-premises servers. Patching must be standardized across both environments and only occur during non-business hours. Which combination of actions satisfies these requirements? (Choose three.)
Choose an answer
Tap an option to check your answer.
Correct answer: Add the physical (on-premises) machines into AWS Systems Manager using Systems Manager Hybrid Activations., Attach an IAM role to the EC2 instances so they can be managed by AWS Systems Manager., Use AWS Systems Manager Maintenance Windows to schedule a patch window..
Why this is the answer
To standardize patching across EC2 and on-premises servers, all machines must be managed by AWS Systems Manager. For on-premises servers, this is achieved by adding them using Systems Manager Hybrid Activations, which registers them as managed instances. EC2 instances require an attached IAM role with appropriate permissions for Systems Manager to manage them. To ensure patching only occurs during non-business hours, AWS Systems Manager Maintenance Windows are used. These allow you to define recurring schedules for tasks like patching, ensuring operations happen within specified timeframes. Creating IAM access keys for on-premises machines is not the standard or secure way to integrate them with Systems Manager; Hybrid Activations are designed for this. Running an Automation document every hour would violate the "non-business hours" requirement. While EventBridge can schedule events, Systems Manager Maintenance Windows are specifically designed for orchestrating operational tasks like patching on a schedule, integrating directly with Systems Manager capabilities.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed