1Z0-1104-25 Question 110
Single answerYour security team mandates that critical patches be applied to all Oracle Linux compute instances within 24 hours of release, with minimal manual effort. You decide to use Oracle Cloud Infrastructure (OCI) OS Management to automate these updates across multiple compartments. Which approach meets this requirement while leveraging OCI OS Management� capabilities for centralized scheduling and automation?
- A
Manually SSH into each instance daily to run 'yum update' and verify package versions individually.
- B
Enable OS Management on each instance, group them into a Managed Instance Group, schedule an automatic patch installation job, and attach the Managed Instance Group to that job.
- C
Rely on a built-in Oracle Linux feature that automatically pulls and applies updates to all instances across compartments without extra configuration.
- D
Create a new custom image with updated packages after each patch release and re-deploy all instances from that image.
Show answer and explanation
Correct answer: B
Explanation
Using Oracle Cloud Infrastructure OS Management allows you to configure scheduled patch updates across multiple instances through Managed Instance Groups. This central approach ensures that critical patches are automatically and consistently applied, preventing known vulnerabilities from persisting. For more information on how to implement OS Management best practices, refer to the official OCI documentation: https://docs.oracle.com/en-us/iaas/Content/os-management/home.htm.
- A. Incorrect.
Option 1 is incorrect. While manual updates using 'yum update' do install patches, they lack automation and require continual operator intervention, defeating the purpose of using OS Management.
- B. Correct.
Option 2 is correct. By enabling OS Management on each instance and grouping them in a Managed Instance Group, you can schedule a patch job that automatically applies critical updates, ensuring consistency and minimal downtime.
- C. Incorrect.
Option 3 is incorrect. There is no single built-in Oracle Linux feature in OCI that automatically pushes updates across all instances without configuration. OCI OS Management must be set up explicitly for automation.
- D. Incorrect.
Option 4 is incorrect. Rebuilding instances from a new image each time a patch is released can be time-consuming and could introduce unnecessary redeployment overhead, rather than leveraging OS Management's ability to install patches in place.