Exam AWS Certified DevOps Engineer - Professional DOP-C02 topic 1 question 47 discussion

ABF are the right answers: A: enable hybrid on AWS system manager B: create IAM role for System manager to manage EC2 instances F: use maintenance windows to schedule patching on non-business hours C: incorrect because there is no IAM access keys for on-prem D: should not run patching every hour E: should not use Eventbridge because AWS has its own service to schedule patching

ABF is correct

To create IAM access keys for on-premises machines to interact with AWS Systems Manager, you need to: create a dedicated IAM user with the necessary permissions for Systems Manager actions, then generate access keys for that user and securely store them on the on-premises machine; ensure you follow best practices like rotating access keys regularly and using a secure method to distribute them.

ABF are correct https://docs.aws.amazon.com/systems-manager/latest/userguide/activations.html To configure non-EC2 machines for use with AWS Systems Manager in a hybrid and multicloud environment, you create a hybrid activation. Non-EC2 machine types supported as managed nodes include the following: - Servers on your own premises (on-premises servers) - AWS IoT Greengrass core devices - AWS IoT and non-AWS edge devices - Virtual machines (VMs), including VMs in other cloud environments

ABF is correct

https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-managedinstances.html AF are right but the letter B is wrong the role is for non EC2 instances

ABF is correct. https://docs.aws.amazon.com/systems-manager/latest/userguide/activations.html

ABF is right

ABF it is