1Z0-1104-25 Question 112
Single answerYou manage a fleet of Linux compute instances in Oracle Cloud Infrastructure (OCI). An upcoming security audit requires that all instances follow a consistent patching schedule. You decide to automate updates using the OCI OS Management service. Which action should you perform first to ensure that OS Management can manage your instances?
- A
Create a Dynamic Group for all eligible instances and define an IAM policy granting OS Management the necessary permissions
- B
Enable Bastion for each instance and manually apply OS updates via SSH
- C
Configure a custom cron job on each instance that fetches updates from Oracle� public Yum repositories
- D
Disable Oracle Cloud Agent plugins to reduce overhead and allow OS Management to run exclusively via REST APIs
Show answer and explanation
Correct answer: A
Explanation
OCI OS Management relies on properly configured IAM policies and dynamic groups to manage Linux instances at scale. The official documentation recommends creating a Dynamic Group that includes your instances, then writing a policy that grants OS Management read and manage permissions for those instances. This setup is required before you can schedule, automate, and centrally report on OS patches and updates. Refer to Oracle� official documentation on �OS Management� for details on enabling and configuring the Oracle Cloud Agent on your compute instances.
- A. Correct.
Correct. Before using OCI OS Management, you must place your compute instances in a Dynamic Group recognized by OCI and grant OS Management permission to manage these instances. This step ensures that OS Management can coordinate updates and generate patch compliance reports for your fleet.
- B. Incorrect.
Incorrect. While Bastion can help with secure SSH access, manually applying updates does not leverage the automated capabilities of OCI OS Management and does not scale well for large fleets.
- C. Incorrect.
Incorrect. This approach bypasses the OCI OS Management service entirely by allowing each instance to fetch updates independently. It lacks centralized management and reporting functionality that OS Management provides.
- D. Incorrect.
Incorrect. Disabling Oracle Cloud Agent plugins will prevent OS Management from functioning. The OS Management service depends on the Oracle Cloud Agent plugin for communication between OCI and your instances.