You manage hundreds of Compute Engine VMs that were created from various custom images and run in several GCP projects. Security policy now requires that all Linux VMs receive critical OS security patches every Wednesday at 02:00 in the VM's local time zone and that patch compliance reports are kept for auditors. You want an automated solution that minimizes operational overhead and does not require rebuilding the VMs. What should you do?
Replace all custom images with the latest Container-Optimized OS image and rely on automatic image updates.
Attach a custom startup script to each instance template that runs apt-get update and apt-get upgrade at system boot.
Enable the OS Config API in each project, verify that the OS Config agent is running on every VM, and create a weekly patch deployment in VM Manager for Wednesdays at 02:00.
Install a third-party configuration-management agent (e.g., Chef or Puppet) on every VM and schedule a weekly patch job from that tool's control plane.
VM Manager's patch management feature lets you schedule recurring patch deployments without recreating the VMs. Enabling the OS Config API in each project and ensuring the OS Config agent is present on every VM allows you to create a weekly patch deployment resource that automatically executes every Wednesday at 02:00. VM Manager stores execution history and compliance data that can be exported for audit purposes. Installing a third-party tool or rebuilding instances is unnecessary, and startup scripts only apply once when a VM boots, so they cannot guarantee weekly execution.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the OS Config API and its role in patch management?
Open an interactive chat with Bash
Can you explain what VM Manager is and how it helps in automating patch management?
Open an interactive chat with Bash
How does the OS Config agent work and why is it necessary on VMs?
Open an interactive chat with Bash
What is the OS Config API in GCP?
Open an interactive chat with Bash
How does VM Manager help with patch management in GCP?
Open an interactive chat with Bash
Why are startup scripts insufficient for weekly patching in GCP?
Open an interactive chat with Bash
GCP Associate Cloud Engineer
Planning and implementing a cloud solution
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99 $11.99
$11.99/mo
Billed monthly, Cancel any time.
$19.99 after promotion ends
3 Month Pass
$44.99 $26.99
$8.99/mo
One time purchase of $26.99, Does not auto-renew.
$44.99 after promotion ends
Save $18!
MOST POPULAR
Annual Pass
$119.99 $71.99
$5.99/mo
One time purchase of $71.99, Does not auto-renew.
$119.99 after promotion ends
Save $48!
BEST DEAL
Lifetime Pass
$189.99 $113.99
One time purchase, Good for life.
Save $76!
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .