PAS-C01 Operations and Maintenance Practice Question
A company uses AWS Systems Manager to automate patching of SAP application servers. Which TWO resources are required to use Systems Manager Patch Manager?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AWS Systems Manager Agent (SSM Agent) installed on the EC2 instances
The correct answers are B and D. AWS Systems Manager Patch Manager requires the SSM Agent to be installed on the EC2 instances (B) to receive and apply patches. Additionally, the instances must be associated with an IAM role that grants Systems Manager permissions (D) to allow the service to communicate with the instances and perform patching actions. Options A, C, and E are not required. An Application Load Balancer (A) is not needed for patching. A NAT gateway (C) is not necessary because you can use VPC endpoints for Systems Manager instead of outbound internet access. An internet gateway (E) is also not required if VPC endpoints are used.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
An Application Load Balancer in front of the instances
Why it's wrong here
Load balancer is not required for patching.
- ✓
AWS Systems Manager Agent (SSM Agent) installed on the EC2 instances
Why this is correct
SSM Agent is required for Systems Manager to communicate with instances.
- ✗
A NAT gateway for outbound internet access
Why it's wrong here
NAT gateway is not required if using VPC endpoints.
- ✓
An IAM role that grants Systems Manager permissions attached to the EC2 instances
Why this is correct
The role allows Systems Manager to manage the instances.
- ✗
An internet gateway attached to the VPC
Why it's wrong here
Internet gateway is not required; VPC endpoints can be used.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every PAS-C01 question from scratch — 1,616 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PAS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PAS-C01 exam.