Your company's security vulnerability management policy wants a member of the security team to have visibility into vulnerabilities and other OS metadata for a specific Compute Engine instance. This…

Question

Options

• A
  • Ensure that the Ops Agent is installed on the Compute Engine instance.
• B
  • Ensure that the Ops Agent is installed on the Compute Engine instance.
• C
  • Ensure that the OS Config agent is installed on the Compute Engine instance.
• D
  • Ensure that the OS Config agent is installed on the Compute Engine instance.

• A
  8% (3)
• B
  3% (1)
• C
  77% (30)
• D
  13% (5)

Explanation

Option C is correct because the OS Config agent is the component that enables VM Manager on Compute Engine, which provides OS vulnerability reports, patch compliance data, and OS inventory metadata - precisely what a security team needs for vulnerability management. Without the OS Config agent installed and running, the instance won't report vulnerability findings to the Cloud Console.

Why A and B (Ops Agent) are wrong: The Ops Agent is designed for operational observability - collecting system metrics and logs for Cloud Monitoring and Cloud Logging. It has no role in security vulnerability scanning or OS metadata collection for compliance purposes. It's a monitoring tool, not a security tool.

Why D is a distractor: D is textually identical to C in this question as presented, suggesting the original question likely had a second condition (such as a specific IAM role like roles/osconfig.vulnerabilityReportViewer) that differentiates them. The OS Config agent alone satisfies the technical requirement, making C the minimal correct answer.

Memory tip: Think of it this way - "OS Config" = OS Security Configuration (patches, vulnerabilities, inventory), while "Ops Agent" = Operations (metrics and logs). If the question mentions vulnerabilities, patches, or OS inventory, the answer involves the OS Config agent and VM Manager.

No community discussion yet for this question.