PAS-C01 Operations and Maintenance Practice Question
An SAP system on AWS uses a custom AMI for its application servers. The operations team needs to update the AMI to include a new security patch. What is the MOST efficient way to update all existing instances without downtime?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a new AMI version, update the Auto Scaling group's launch template, and perform a rolling update.
Creating a new AMI version, updating the Auto Scaling group's launch template, and performing a rolling update ensures zero downtime by gradually replacing instances with the patched AMI. This is the most efficient method for updating all existing instances without downtime. Option B is wrong because stopping all instances causes downtime. Option C is wrong because Patch Manager patches live instances, but the requirement is to update the AMI for future instances, not just patch running ones. Option D is wrong because manually launching instances is inefficient and not automated.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Create a new AMI version, update the Auto Scaling group's launch template, and perform a rolling update.
Why this is correct
This approach updates the AMI and replaces instances with minimal downtime.
- ✗
Stop all instances, apply the patch, create a new AMI, and start instances.
Why it's wrong here
Stopping instances causes downtime.
- ✗
Use AWS Systems Manager Patch Manager to apply the patch to all running instances.
Why it's wrong here
Patch Manager patches existing instances, but does not update the AMI for future instances.
- ✗
Create a new AMI, launch new instances manually, and terminate old ones.
Why it's wrong here
Manual process is inefficient and error-prone.
Go deeper
Related to this question
About these practice questions
One of 1,616 original PAS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PAS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PAS-C01 exam.