Your organization runs 200 Linux virtual machines in several Google Cloud projects. You want to use VM Manager to automatically install security updates every Sunday at 03:00 without requiring VM owners to modify their instances. Central administrators must be able to create and maintain the schedule from a single location. Which approach meets the requirements while following Google-recommended practices?
Install the Cloud Monitoring agent on all VMs and configure an uptime check that runs an apt-get upgrade command through a custom alerting policy every week.
Add a startup script to each instance template that runs yum update when the VM boots; then use instance group rolling updates to trigger patching on Sunday.
Enable the OS Config API in every project, verify that the OS Config agent is present, assign the roles/osconfig.patchDeploymentAdmin role to the operations team, and create a recurring patch deployment that targets instances with a common label scheduled for Sunday 03:00.
Create a cron job inside every VM that executes apt-get update && apt-get dist-upgrade at 03:00 on Sundays; no additional Google Cloud APIs need to be enabled.
VM Manager's Patch Management relies on the OS Config API and the OS Config agent that is pre-installed on most current public images. Enabling the API in each project and granting the patchDeploymentAdmin role lets central operators create a recurring patch deployment that targets VMs by label, so instance owners do not need to change startup scripts or cron jobs. Installing Monitoring or Logging agents, or baking update commands into startup scripts, either does not apply patches or requires per-instance changes, so they do not satisfy the requirement.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is VM Manager in Google Cloud?
Open an interactive chat with Bash
What is the OS Config API and its role in managing VMs?
Open an interactive chat with Bash
How does labeling instances simplify patch deployment in Google Cloud?
Open an interactive chat with Bash
What is the OS Config API and why is it important for VM Manager?
Open an interactive chat with Bash
What does the roles/osconfig.patchDeploymentAdmin role allow an administrator to do?
Open an interactive chat with Bash
How do labels help in managing VMs for patch deployments?
Open an interactive chat with Bash
GCP Associate Cloud Engineer
Planning and implementing a cloud solution
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99 $11.99
$11.99/mo
Billed monthly, Cancel any time.
$19.99 after promotion ends
3 Month Pass
$44.99 $26.99
$8.99/mo
One time purchase of $26.99, Does not auto-renew.
$44.99 after promotion ends
Save $18!
MOST POPULAR
Annual Pass
$119.99 $71.99
$5.99/mo
One time purchase of $71.99, Does not auto-renew.
$119.99 after promotion ends
Save $48!
BEST DEAL
Lifetime Pass
$189.99 $113.99
One time purchase, Good for life.
Save $76!
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .