Google Associate Cloud Engineer Question 106
Select 3Google Cloud PlatformYou are tasked with ensuring that all virtual machines in your Google Cloud project are up-to-date with the latest security patches. Which of the following steps should you take to configure VM Manager for this purpose?
- A
Enable the OS Config API in your Google Cloud project.
- B
Install the Ops Agent on each VM instance.
- C
Assign the 'roles/osconfig.guestPolicyAdmin' IAM role to the service account used by the VMs.
- D
Set up a VM Manager patch deployment configuration through the Google Cloud Console.
- E
Install the Google Cloud SDK on each VM instance.
Show answer and explanation
Correct answers: A, C, D
Explanation
To manage VM updates effectively with VM Manager, you need to enable the required APIs, assign appropriate IAM roles for permissions, and configure patch deployments. This ensures that VM instances are automatically updated with the latest security patches and OS updates.
- A. Correct.
Enabling the OS Config API is necessary to use VM Manager for patch management.
- B. Incorrect.
The Ops Agent is used for logging and monitoring, not specifically for managing VM updates.
- C. Correct.
The 'roles/osconfig.guestPolicyAdmin' IAM role allows the VM Manager service to apply policies and updates to VM instances.
- D. Correct.
Setting up a patch deployment configuration is a key step in automating the application of updates and patches to VM instances.
- E. Incorrect.
The Google Cloud SDK is not required on each VM for the VM Manager to apply patches and updates.