1Z0-1104-25 Question 109
Single answerYour company needs to ensure that all Oracle Linux compute instances in Oracle Cloud Infrastructure (OCI) automatically receive critical updates without manual intervention. Due to compliance requirements, these updates must be applied only during a scheduled maintenance window outside business hours. Which approach correctly uses OCI's OS Management service to meet these requirements?
- A
A) Create a custom script on each compute instance to run 'yum update' nightly using cron, bypassing OS Management altogether.
- B
B) Enable the OS Management plugin on each instance, group the instances into a managed instance group, and configure a scheduled patch job to install critical updates during the specified maintenance window.
- C
C) Configure Oracle Cloud Agent to automatically revert any applied patches, then run a partial patch job on a separate environment outside OCI.
- D
D) Create a regional policy to apply all available patches to instances every hour, ensuring no missed updates.
Show answer and explanation
Correct answer: B
Explanation
Using OCI's OS Management service is the preferred method for automated OS updates. By enabling the service on each compute instance and placing them into managed instance groups, you can create scheduled patch jobs to install critical updates during designated maintenance windows, ensuring both compliance and minimal operational impact. Refer to the Oracle Cloud Infrastructure OS Management documentation for details on creating and configuring scheduling policies, managed instance groups, and patch jobs.
- A. Incorrect.
A) Incorrect. While cron jobs can automate certain tasks, this approach does not leverage OCI's OS Management capabilities, such as standardized patch groups and scheduled patch jobs. It also can't directly enforce compliance requirements for scheduled updates across many instances.
- B. Correct.
B) Correct. By enabling OS Management, grouping instances, and scheduling patch jobs, you can ensure that updates are automatically applied during the defined maintenance window. This aligns with best practices for centralized patch management and minimal disruption.
- C. Incorrect.
C) Incorrect. Automatically reverting patches and running a partial patch job outside OCI is not a valid or efficient approach. It bypasses OCI OS Management's scheduling and grouping features and adds unnecessary complexity.
- D. Incorrect.
D) Incorrect. Applying updates every hour lacks the control necessary for compliance requirements and does not align with the scheduled maintenance window requirement. It could introduce frequent disruptions and is not recommended.