Google Associate Cloud Engineer Question 107
Select 3Google Cloud PlatformYou are tasked with ensuring that all virtual machines (VMs) in your organization's Google Cloud environment are compliant with the latest security patches. You decide to configure VM Manager to automate this process. Which of the following steps should you take to correctly configure VM Manager for patch management?
- A
Enable the appropriate APIs, such as OS Config API, in your Google Cloud project.
- B
Create an IAM role with permissions to access VM Manager and assign it to each VM instance.
- C
Configure a patch deployment using the Google Cloud Console.
- D
Ensure that each VM has the OS Config agent installed and running.
- E
Set up a custom network to isolate VM Manager traffic.
Show answer and explanation
Correct answers: A, C, D
Explanation
To configure VM Manager for patch management, you need to ensure that the correct APIs are enabled, patch deployments are set up, and that the OS Config agent is operational on each VM. These steps allow VM Manager to manage and apply security patches automatically, ensuring compliance and reducing security risks.
- A. Correct.
Enabling the necessary APIs, like the OS Config API, is essential for VM Manager to function as it relies on these services.
- B. Incorrect.
Creating an IAM role and assigning it to each VM is not a necessary step for configuring VM Manager; VM Manager uses service accounts and APIs.
- C. Correct.
Configuring a patch deployment is a critical step in automating patch management using VM Manager, allowing you to specify patching schedules and options.
- D. Correct.
The OS Config agent must be installed and running on each VM to interact with VM Manager and apply patches.
- E. Incorrect.
While setting up a custom network might be beneficial for other purposes, it is not a requirement for configuring VM Manager.