1Z0-1104-25 Question 113
Select 2Your company recently deployed hundreds of Linux-based Compute instances in Oracle Cloud Infrastructure (OCI). You have been tasked with ensuring that these instances receive regular security and system updates automatically, with minimal manual intervention. Which two actions must you take to properly utilize OCI OS Management to automate system updates across all instances?
- A
Install the OS Management Service plugin on each Linux instance and add each instance to a Managed Instance Group
- B
Define and schedule patching jobs using OS Management to automatically apply updates to all managed instances
- C
Disable any network security lists and firewalls so that patches always install without interruption
- D
Rely solely on the base operating system� default auto-update setting without configuring OS Management
Show answer and explanation
Correct answers: A, B
Explanation
To automate system updates on OCI using the OS Management Service, you must first install the OS Management Service plugin on each instance and add them to a Managed Instance Group. After that, you can define scheduled jobs within OS Management to automatically apply patches, ensuring compliance and security. Refer to Oracle Cloud Infrastructure documentation on 'Using OS Management' for detailed configurations and best practices.
- A. Correct.
Option 1 is correct. Installing the OS Management Service plugin on each instance and grouping these instances under a Managed Instance Group is a prerequisite to leverage OS Management features such as scheduling and automation. This step ensures that OS Management can detect and manage the packages and updates on those instances.
- B. Correct.
Option 2 is correct. Once the instances are being managed by OS Management, creating a scheduled patching job is crucial to automate regular system updates. This reduces manual overhead and helps maintain compliance with security policies.
- C. Incorrect.
Option 3 is incorrect. Disabling security lists or firewalls is not a recommended practice and could expose services to unnecessary risk. Properly configured security rules and access requirements�and not disabling them�ensure secure and uninterrupted patching.
- D. Incorrect.
Option 4 is incorrect. Simply relying on the base operating system� default auto-update feature bypasses the centralized control and reporting that OCI OS Management provides. This approach doesn�t provide the full visibility, scheduling, and compliance checks needed in enterprise environments.