Architecting on AWS Certification Equipment Maintenance & Calibration 2

Question 1

An operations team needs to run patching scripts on 500 EC2 instances during a defined maintenance window without manual intervention. Which AWS service provides native maintenance window scheduling?

Accepted Answer

AWS Systems Manager Maintenance Windows

Answer

AWS Systems Manager Maintenance Windows lets you define recurring schedules to run patching, scripts, and commands across fleets of EC2 instances automatically.

Question 2

A company wants to enforce that all EC2 instances remain compliant with the latest approved AMI. Which AWS Systems Manager capability continuously checks and reports on this compliance status?

Accepted Answer

SSM Compliance

Answer

SSM Compliance aggregates patch and association compliance data, providing a unified view of which instances meet defined configuration baselines.

Question 3

During a blue/green deployment, an architect must ensure old (blue) instances are decommissioned only after health checks confirm the green fleet is fully operational. Which ELB feature supports this gate?

Accepted Answer

Connection Draining (Deregistration Delay)

Answer

Connection Draining (Deregistration Delay) keeps in-flight requests alive on deregistering instances, ensuring clean handoff before the old fleet is terminated.

Question 4

A solutions architect needs to rotate database credentials stored in AWS Secrets Manager every 30 days without application downtime. What is the recommended rotation mechanism?

Accepted Answer

Lambda-based automatic rotation built into Secrets Manager

Answer

Secrets Manager supports automatic rotation using a Lambda function that updates the secret value and propagates the change to the target resource on the defined schedule.

Question 5

An EC2 Auto Scaling group must replace instances whose status checks fail without any human intervention. Which Auto Scaling health check type should be enabled alongside EC2 status checks?

Accepted Answer

ELB health check

Answer

Enabling ELB health checks in the Auto Scaling group causes it to terminate and replace instances that the load balancer marks as unhealthy, beyond just EC2 status checks.

Architecting on AWS Certification Practice Test

Architecting on AWS Certification Practice Test

Architecting on AWS Certification Equipment Maintenance & Calibration 2