1Z0-1072-25 Question 33
Select 2You are setting up automatic weekly patching for your Linux-based Compute instances in Oracle Cloud Infrastructure (OCI) using OS Management. Your organization's security policy mandates that the latest security patches be applied without manual intervention. Which two steps must you perform to ensure OS Management can regularly apply security patches to these instances?
- A
Enable the OS Management service plugin on each instance and create a scheduled job within the OS Management console.
- B
Manually install the latest kernel packages on the instances before turning on OS Management.
- C
Configure an IAM policy granting the OS Management service permission to manage instances in the appropriate compartment.
- D
Upload patch updates to an OCI Object Storage bucket and configure OS Management to pull updates from that bucket.
Show answer and explanation
Correct answers: A, C
Explanation
OS Management in OCI automates package and kernel updates on supported Compute instances. To leverage this service, you must enable the OS Management plugin or agent on your instances and provide the correct IAM permissions. You can then schedule updates (e.g., weekly) so that patches are automatically applied. For more details, consult the Oracle documentation on configuring OS Management and scheduling patch jobs for your Compute instances.
- A. Correct.
Correct. You must enable the OS Management service or plugin on your instances to allow OCI's OS Management to access and manage them. Then, you can create a scheduled job in the OS Management console to automatically apply patches.
- B. Incorrect.
Incorrect. OS Management does not require that you install the latest kernel packages manually beforehand. Once enabled and properly configured, OS Management can handle package and kernel updates on its own.
- C. Correct.
Correct. OS Management requires authorization to interact with and manage instances. Typically, you create an IAM policy for the dynamic group or service principal to allow OS Management to patch and manage the instances in your compartment.
- D. Incorrect.
Incorrect. OS Management retrieves updates directly from Oracle Linux or other supported repositories. There is no requirement to store patch updates in Object Storage.