A company is designing a hybrid cloud architecture. They have an AWS Direct Connect connection. They want to use AWS Systems Manager to manage their on-premises servers alongside their EC2 instances. The on-premises servers do not have direct internet access. Which combination of steps is required? (Select THREE)

Answer options:

Install the SSM Agent on the on-premises servers.

Create VPC Endpoints for Systems Manager in the VPC.

Create an IAM service role for Systems Manager and register the on-premises servers as managed instances.

Deploy an AWS Storage Gateway on-premises.

Configure an AWS VPN connection as a backup to Direct Connect.

Assign public IP addresses to the on-premises servers.

How to approach this question

Identify the requirements for hybrid Systems Manager without internet.

Full Answer

Install the SSM Agent on the on-premises servers., Create VPC Endpoints for Systems Manager in the VPC., Create an IAM service role for Systems Manager and register the on-premises servers as managed instances.

To manage on-premises servers with SSM without internet access, you must install the SSM Agent, register the servers using an IAM role (Hybrid Activation), and use VPC Endpoints so the traffic flows privately over Direct Connect.

Common mistakes

Forgetting that VPC Endpoints are required for private API access.

Question 44 All questions Question 46

Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 7

75 questions · hints · full answers · grading

More questions from this exam

Q01A global enterprise is designing a multi-region network architecture connecting 50 AWS accounts a...Hard Q02A company is migrating its hybrid network to AWS. They have two 10 Gbps AWS Direct Connect connec...Hard Q03An enterprise has 100 AWS accounts in AWS Organizations. The security team mandates that all Amaz...Medium Q04A financial company requires that all EBS volumes, S3 buckets, and RDS databases be encrypted usi...Easy Q05An enterprise is designing a disaster recovery strategy for a critical application running on Ama...Hard

View all 75 questions →