1Z0-1104-25 Question 114
Select 2You are an OCI security professional overseeing a fleet of 50 Linux Compute instances that support customer-facing applications. Your security team requires that all instances be patched weekly to address vulnerabilities promptly, but you also need to minimize service interruptions. Which two actions should you take using OCI� OS Management service to meet these requirements and automate regular patching without causing unplanned downtime?
- A
Create a managed instance group for these 50 Linux hosts and schedule a weekly update job with a rolling patch strategy.
- B
Manually log in to each compute instance weekly to apply patches using the yum or apt utility in sudo mode.
- C
Use a custom OS Management script that stops all running instances, applies updates simultaneously, and then restarts them after completion.
- D
Enable Automatic OS Updates in the OS Management settings and configure a maintenance window for rolling updates.
- E
Rely on Compute Autoscaling to automatically provision new patched instances without scheduling any update jobs.
Show answer and explanation
Correct answers: A, D
Explanation
To effectively automate updates on multiple compute instances while minimizing downtime, OCI OS Management supports managed instance groups, rolling updates, and configurable maintenance windows. By scheduling a rolling patch job (option 1) or enabling automatic updates within a defined window (option 4), you can apply system updates consistently, reduce manual effort, and limit disruptions. According to Oracle� OS Management best practices, manually patching every instance or stopping all instances simultaneously should be avoided to minimize risk and downtime.
- A. Correct.
Option 1 is correct. By grouping instances and using a scheduled, rolling patch process, you ensure updates occur incrementally, minimizing downtime.
- B. Incorrect.
Option 2 is incorrect. Manually patching each instance is time-consuming and prone to human error, failing to meet automation and minimal downtime requirements.
- C. Incorrect.
Option 3 is incorrect. Stopping all instances for updates ignores the rolling approach and can cause an extended outage, conflicting with the minimal downtime goal.
- D. Correct.
Option 4 is correct. Enabling Automatic OS Updates with a defined maintenance window ensures updates occur regularly and in a controlled manner, reducing downtime risk.
- E. Incorrect.
Option 5 is incorrect. Autoscaling alone does not handle regularly scheduled patches or ensure existing instances are updated in place.