Professional Cloud Security EngineerDemo

By Google · Question Mode

QuestionQ166

Managing operations

A customer has deployed an application on Compute Engine that leverages the elastic nature of cloud computing.

How can you collaborate with Infrastructure Operations Engineers to best ensure that Windows Compute Engine VMs remain current with all the latest OS patches?

  • A Build new base images when patches are available, and use a CI/CD pipeline to rebuild VMs, deploying incrementally.
  • B Federate a Domain Controller into Compute Engine, and roll out weekly patches via Group Policy Object.
  • C Use Deployment Manager to provision updated VMs into new serving Instance Groups (IGs).
  • D Reboot all VMs during the weekly maintenance window and allow the StartUp Script to download the latest patches from the internet.
Explanation

An immutable-infrastructure approach packages approved OS patches into a new base image and replaces instances through a CI/CD rollout. This makes every replacement VM reproducible and current, while incremental deployment limits service disruption. Compute Engine managed instance groups support rolling out a new instance template gradually and controlling disruption during the update.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!