1Z0-1072-25 Question 32
Select 2You are managing a large fleet of Linux compute instances across multiple compartments in Oracle Cloud Infrastructure (OCI) and want to automate security patch updates. You have decided to leverage the OS Management service to minimize downtime. Which two steps must you perform so that OS Management can automatically apply and track updates for these instances?
- A
Enable the OS Management plugin within each compute instance� OCI agent configuration.
- B
Create a dynamic group that includes these instances, then write an IAM policy granting OS Management the required privileges.
- C
Manually run the yum or apt package manager on each instance to apply updates directly from the OS vendor repository.
- D
Disable instance principals to ensure updates only happen via user-managed scripts.
Show answer and explanation
Correct answers: A, B
Explanation
To configure OS Management for automated patching, you must ensure the OS Management agent plugin is enabled on each instance (so OCI can interact with it) and create the correct IAM setup. Typically, this involves creating a dynamic group and granting OS Management the necessary permissions. These steps enable centralized, automated updates while adhering to OCI best practices. Refer to Oracle� official documentation on �Managing OS Updates and Patches with the OS Management Service� for detailed configuration guidelines.
- A. Correct.
Correct. Each compute instance must have the OS Management plugin enabled and properly configured in its OCI agent. This allows the OS Management service to communicate with the instance and manage patches or updates.
- B. Correct.
Correct. You need to define a dynamic group to include the target compute instances and then create an appropriate IAM policy that allows the OS Management service to manage these instances. Without the policy, OS Management cannot act on the instances.
- C. Incorrect.
Incorrect. While you can manually run native package managers for updates, it does not leverage OCI� OS Management automation. Relying solely on manual processes contradicts the goal of automatic updates and tracking.
- D. Incorrect.
Incorrect. You should not disable instance principals if you want the OS Management service to function automatically. Instance principals, together with dynamic groups, allow OCI services (including OS Management) to perform actions on instances without needing separate user credentials.