1Z0-1067-25 Question 35
Select 2You are a Cloud Ops Professional responsible for automatically configuring newly launched compute instances in Oracle Cloud Infrastructure (OCI) using an open-source configuration management tool, such as Ansible. The compute instances are ephemeral and frequently scaled up or down. Which two steps must you perform to ensure each new instance is configured with your standard Ansible roles and playbooks immediately after launch?
- A
Store your Ansible roles and playbooks in the instance's user data to run at first boot
- B
Enable Instance Principal authentication and grant permissions to retrieve Ansible content from a repository
- C
Use an Ephemeral Boot Volume to hold all Ansible configurations for each new instance
- D
Request an Oracle Cloud Agent plugin to automatically install Ansible upon instance creation
- E
Configure a Network Load Balancer to distribute configuration tasks among instances
Show answer and explanation
Correct answers: A, B
Explanation
When using an external configuration management tool like Ansible in OCI, you must ensure newly launched instances can automatically retrieve and execute the necessary playbooks. Placing relevant scripts or download commands in the instance� user data ensures configurations are applied at boot. Further, Instance Principal authentication allows the instance to securely access external resources (e.g., a code repository in OCI Object Storage). This approach adheres to OCI best practices for ephemeral or frequently scaled instances. Refer to OCI documentation on Instance Principals (docs.oracle.com/en/oci/) and user data usage for more details.
- A. Correct.
Correct. Placing your Ansible roles and playbooks within the user data (or scripting the retrieval of them) ensures that the instance automatically applies the configurations at startup without manual intervention.
- B. Correct.
Correct. By enabling Instance Principal authentication and granting the appropriate permissions, your instance can securely retrieve Ansible roles or playbooks from OCI Object Storage or Git repositories without requiring static credentials.
- C. Incorrect.
Incorrect. An Ephemeral Boot Volume only persists for the lifetime of the instance. Storing Ansible configurations directly on it won�t guarantee consistent retrieval or application, especially when instances are recreated.
- D. Incorrect.
Incorrect. The Oracle Cloud Agent is primarily used for OS-level monitoring, logging, and plugin functionality. It does not automatically install or run Ansible playbooks without additional configuration. You still need to define how Ansible content is delivered and executed on your instance.
- E. Incorrect.
Incorrect. A Network Load Balancer distributes traffic among services. It does not handle configuration management tasks or orchestrate the Ansible deployment process across new compute instances.