1Z0-1072-25 Question 34
Select 2You have multiple Oracle Linux compute instances across several compartments in your Oracle Cloud Infrastructure tenancy. Your goal is to use OS Management to automatically apply the latest patches to these instances on a regular schedule. Which TWO steps must you complete to ensure these instances are properly configured for OS Management?
- A
Enable and configure the OS Management agent on each compute instance you want to manage.
- B
Create a policy that grants the OS Management service permissions to manage instances in the appropriate compartments.
- C
Assign a public facing subnet to each instance so OS Management can reach them over the Internet by default.
- D
Set up instance principals that provide the OS Management service full network access to all ports on the instance.
Show answer and explanation
Correct answers: A, B
Explanation
To configure OS Management on Oracle Linux compute instances, you must ensure the OS Management agent is running on each instance and grant the OS Management service the necessary IAM permissions. Additional networking configurations, like assigning public subnets or granting overly broad network access, are not required. For more details, refer to Oracle� OS Management documentation: https://docs.oracle.com/en-us/iaas/os-management/
- A. Correct.
Correct. Each compute instance must have the OS Management agent enabled and running. If the agent is not already installed (it typically is on Oracle Linux), you must install and configure it to allow OS Management to gather update information and apply patches automatically.
- B. Correct.
Correct. You need to create an IAM policy allowing the OS Management service to manage your instances (e.g., 'allow service osms to manage instances in compartment X'). This ensures OS Management can perform actions like enumerating available patches, installing updates, and modifying instance states if needed.
- C. Incorrect.
Incorrect. OS Management does not require a public facing subnet by default. The OS Management agent communicates securely with Oracle services over the existing service endpoints, so a public subnet or direct Internet exposure is not mandatory for patching.
- D. Incorrect.
Incorrect. While instance principals are useful for allowing instances to call Oracle Cloud Infrastructure services, OS Management specifically needs an IAM policy for the service itself, not full network access to all instance ports. This option confuses networking access rules with service permissions.