Exam Professional Cloud Architect topic 1 question 121 discussion

B. Create a Debian-based Compute Engine instance, install and configure the application, and use OS patch management to install available updates.

Answer is B

It is B, using Os path. It is interesting the OS policy also, to run commands inside the VMs.

The question requires MINIMAL manual intervention for patching Debian Linux. Therefore it makes most sense to create a Docker container using the Debian Marketplace Distro (as long as the FROM field in your Dockerfile points to `$distro:latest` from Cloud Marketplace) Ref: https://cloud.google.com/blog/products/containers-kubernetes/exploring-container-security-let-google-do-the-patching-with-new-managed-base-images and https://cloud.google.com/blog/products/containers-kubernetes/exploring-container-security-how-containers-enable-passive-patching-and-a-better-model-for-supply-chain-security

You want to ensure that you can install Debian distribution updates with minimal manual intervention whenever they become available... | if it is in the cloud then option A | if it is on the internet then option b... It is a trick question!

Option A, "Create a Compute Engine instance template using the most recent Debian image. Create an instance from this template, and install and configure the application as part of the startup script. Repeat this process whenever a new Google-managed Debian image becomes available," is the correct choice. This approach allows you to automate the process of creating a new instance with the latest Debian image and configuring the application. By using an instance template and a startup script, you can ensure that the application is correctly configured each time a new instance is created. When a new Debian image becomes available, you can simply create a new instance template and repeat the process. Option B, using OS patch management, would allow you to install updates, but it wouldn't necessarily ensure that the application is correctly configured after an update.

Can someone explain why the answer is not D ? Isn't the best practice to use containers ?

A is correct, with template and startup script you can create multiple instance with minimal manual intervention; when the new debian release will be available, you need update only the template with new image of debian distribution.

B is the correct answer, Use OS patch management to apply operating system patches across a set of Compute Engine VM instances (VMs). Long running VMs require periodic system updates to protect against defects and vulnerabilities. The OS patch management service has two main components: Patch compliance reporting, which provides insights on the patch status of your VM instances across Windows and Linux distributions. Along with the insights, you can also view recommendations for your VM instances. Patch deployment, which automates the operating system and software patch update process. A patch deployment schedules patch jobs. A patch job runs across VM instances and applies patches. https://cloud.google.com/compute/docs/os-patch-management

B is ok

B is the simplest option and with minimal intervention. Other answers may be technically possible but the question does not ask for anything else (e.g. containers, templates, etc.)

I will go with B , there is no need to application configuration each time

B is the answer. https://cloud.google.com/compute/docs/os-patch-management Use OS patch management to apply operating system patches across a set of Compute Engine VM instances (VMs).

Key words : "with minimal manual intervention whenever they become available" With OS Patch Management the OS will have all the latest available updates at that point automatically which wouldn't be the case with A.

vote B about A using latest template for update patch, next time you have to make template again. ans B, make once setting for good basically with no intervention.

A is correct answer. I am not able to understand B option and ppl are simply adding patch management URL as reference. How this will relate with answer ? A is correct answer.

The ask in this question is "you want to ensure that you can install Debian distribution updates (which is OS updates specifically) with minimal manual intervention whenever they become available." That is accomplished by an OS patch management. https://cloud.google.com/compute/docs/os-patch-management