1Z0-1104-25 Question 111
Single answerYou have a fleet of Oracle Linux and Windows Server instances in Oracle Cloud Infrastructure (OCI) spread across multiple compartments. To align with your organization� security policies, you want to automate the installation of critical security patches on these instances through the OS Management service. Which single approach will best help you minimize manual effort and downtime while maintaining consistent patch compliance?
- A
A. Define a scheduled job in the OS Management service that automates patch installation during a designated maintenance window.
- B
B. Configure a cron job on each Linux instance to run 'yum update -y' daily and manually run Windows updates as needed.
- C
C. Rely on Oracle Cloud� automatic patching, which applies OS updates to all instances without user intervention.
- D
D. Use a Terraform configuration in OCI Resource Manager to manually trigger package updates on each instance once a month.
Show answer and explanation
Correct answer: A
Explanation
OS Management in OCI allows you to schedule patching, control deployment windows, and maintain compliance across Linux and Windows instances. By defining a scheduled job, you can automate patch application and mitigate security risks without manually invoking updates. This approach aligns with OCI best practices, as documented in the Oracle Cloud Infrastructure OS Management documentation, which emphasizes centralized, automated workflows for consistent patch compliance.
- A. Correct.
A. Correct. OS Management provides scheduled jobs that automatically install patches during maintenance windows you define. This approach integrates with OCI-managed update workflows, helps reduce manual updates, and allows administrators to test patches in a controlled timeframe.
- B. Incorrect.
B. Incorrect. While cron jobs can automate some Linux updates, this method doesn�t integrate with OS Management� centralized scheduling and reporting. You�d still need a separate mechanism for Windows Server updates, leading to fragmented and more error-prone processes.
- C. Incorrect.
C. Incorrect. OCI does not automatically patch the operating system on your instances without user configuration. You must specifically configure OS Management jobs or use other patch-management solutions.
- D. Incorrect.
D. Incorrect. Although Terraform can automate infrastructure provisioning, using Resource Manager to manually trigger package updates monthly is less efficient. It still relies on manual scheduling and doesn�t leverage OS Management� built-in scheduling or compliance tracking.