1Z0-1067-25 Question 30
Single answerYour team manages a set of Oracle Linux compute instances in Oracle Cloud Infrastructure, each requiring frequent updates, security patches, and environment-specific configurations. You want to adopt an Infrastructure-as-Code (IaC) practice for consistent configuration, version control, and minimal manual overhead across all instances. Which approach best meets these requirements?
- A
Use OCI OS Management to patch instances automatically without any additional configuration management tool
- B
Adopt an Ansible-based approach with version-controlled playbooks to define and push consistent configurations
- C
Maintain separate custom images for each compute instance and manually redeploy them whenever configurations change
- D
Write shell scripts and run them manually on each instance whenever updates are needed
Show answer and explanation
Correct answer: B
Explanation
Adopting a configuration management tool such as Ansible, with playbooks stored in a version control system, is a widely recommended practice for ensuring consistent, auditable, and automated configurations in OCI. Refer to the Oracle Cloud Infrastructure Documentation on using Ansible modules (docs.oracle.com/en-us/iaas/tools/ansible-modules/latest/) for detailed guidance on how to integrate Ansible playbooks with OCI resources.
- A. Incorrect.
Option 1: OCI OS Management can help automate patches and updates, but it does not provide a complete solution for environment-specific settings or advanced configuration management. While useful for core OS updates, it does not fully address IaC best practices involving version control and orchestration of custom configurations.
- B. Correct.
Option 2: Using Ansible with version-controlled playbooks is a strong IaC approach. You can define configurations in code, store them in a repository, and automatically apply them to target instances. This aligns with best practices for repeatability, traceability, and consistency in Oracle Cloud Infrastructure environments.
- C. Incorrect.
Option 3: Custom images can simplify some deployment tasks but they quickly become cumbersome when continuous updates or environment-specific variations are required. Frequently recreating images and redeploying instances is neither efficient nor aligned with standard configuration management strategies.
- D. Incorrect.
Option 4: Manually executing shell scripts for each update introduces a high risk of error and inconsistency, and does not align well with IaC principles. Changes cannot be easily tracked or rolled back, and this approach does not scale with larger fleets of instances.