DVA-C02 Deployment Practice Question
A company uses AWS OpsWorks for configuration management. They want to migrate to AWS Systems Manager for patching and automation. They have a fleet of EC2 instances running Amazon Linux 2. Which Systems Manager capability should they use to automate patching?
⚠ Common exam trap
DVA-C02 often tests the confusion between Systems Manager capabilities — candidates pick Run Command or Maintenance Windows for patching when the correct answer is the purpose-built Patch Manager.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Patch Manager
AWS Systems Manager Patch Manager is the capability specifically designed to automate the process of patching managed nodes, including EC2 instances running Amazon Linux 2. It uses patch baselines to define approved patches and can apply them on a schedule via maintenance windows or on demand. This directly replaces the patching functionality previously provided by OpsWorks.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Patch Manager
Why this is correct
AWS Systems Manager Patch Manager is the dedicated service specifically designed to automate the process of scanning instances for missing patches and applying security updates or other patches. It allows administrators to define patch baselines, schedule patching operations, and monitor compliance across entire fleets of managed instances, including those configured via AWS OpsWorks, ensuring systems remain secure and up-to-date without manual intervention.
- ✗
State Manager
Why it's wrong here
AWS Systems Manager State Manager is primarily used to define and enforce a consistent desired state configuration across a fleet of instances. While it can execute scripts, including those related to patching, its main purpose is continuous configuration compliance, ensuring that instances adhere to specified settings over time rather than providing a dedicated, comprehensive solution for automated patch baseline management and reporting.
- ✗
Run Command
Why it's wrong here
AWS Systems Manager Run Command provides an on-demand capability to execute specific commands or scripts on one or more managed instances. Although one could manually craft and run a script to apply patches using Run Command, it lacks the inherent automation, patch baseline definition, compliance reporting, and intelligent scheduling features that a dedicated patching service offers. It's a foundational execution tool, not a full-fledged patch management system.
- ✗
Maintenance Windows
Why it's wrong here
AWS Systems Manager Maintenance Windows are used to define recurring time periods during which potentially disruptive actions, such as applying patches or performing system updates, can be safely executed on instances. While crucial for minimizing operational impact, Maintenance Windows are purely a scheduling mechanism; they do not perform the actual patching process themselves. They orchestrate *when* other Systems Manager capabilities, like Patch Manager, will run.
Go deeper
Related to this question
About these practice questions
Courseiva writes every DVA-C02 question from scratch — 1,135 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Amazon Web Services exam blueprint
This DVA-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DVA-C02 exam.