PAS-C01 Migration Practice Question
A company is migrating a SAP system to AWS and wants to use AWS Systems Manager for patching. Which TWO prerequisites are required to use AWS Systems Manager Patch Manager?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The AWS Systems Manager Agent (SSM Agent) must be installed on the EC2 instance.
Correct options are C and D. The SSM Agent must be installed and running on the EC2 instances (C), and the instances must have an IAM role that grants Systems Manager permissions (D). Option A is incorrect because Patch Manager works with instances in private subnets as long as they have outbound internet access or a VPC endpoint. Option B is incorrect because Patch Manager supports multiple operating systems, not just Amazon Linux 2. Option E is incorrect because a maintenance window is not strictly required for Patch Manager; patching can be done on demand.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The EC2 instance must be in a public subnet.
Why it's wrong here
Incorrect: Instances do not need to be in a public subnet; they can be in a private subnet with outbound internet access or a VPC endpoint.
- ✗
The EC2 instance must be running Amazon Linux 2.
Why it's wrong here
Incorrect: Patch Manager supports various Linux distributions and Windows, not only Amazon Linux 2.
- ✓
The AWS Systems Manager Agent (SSM Agent) must be installed on the EC2 instance.
Why this is correct
Correct: The SSM Agent must be installed and running on the instance to enable patching via Patch Manager.
- ✓
An IAM role with permissions for Systems Manager must be attached to the EC2 instance.
Why this is correct
Correct: An IAM role with appropriate permissions (e.g., AmazonSSMManagedInstanceCore) must be attached to the instance.
- ✗
A maintenance window must be configured with a reboot option.
Why it's wrong here
Incorrect: A maintenance window is optional; patching can be performed on demand or via a schedule.
Visual reference
Go deeper
Related to this question
About these practice questions
This PAS-C01 question is part of Courseiva's 1,616-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PAS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PAS-C01 exam.