Module 13: Patch Management

Question 1

Update Manager performs the following 3 tasks:

Answer 1

Scans for compliance and applies updates, directly upgrades and installs and updates 3rd party software

Question 2

Patch and Upgrade Mgmt begins by: downloading info about _ __ __ _____ ___

Answer 2

a set of security patches.

Question 3

One or more security patches are aggregated to ___ _ _____

Answer 3

form a baseline.

Question 4

If a baseline group contains both upgrade and patch baselines, which runs first?

Answer 4

upgrade

Question 5

Updating or upgrading machines, appliances and hosts with a baseline or baseline group can be ___ ____ or through ____ ____

Answer 5

started manually or thru scheduled tasks.

Question 6

6 major components of update mgr:

Answer 6

Update Mgr Server, Patch Database, Update Manager plug in, Guest Agents, and (Optional) Download Server, Content Servers (p591)

Question 7

UMDS =

Answer 7

Update Manager Download Service - optional module of Update Mgr, used on the download server to download patches

Question 8

T/F? Update Manager contacts Shavlik to gather the latest information (metadata)
about patches for all major applications and operating systems.

Answer 8

True

Question 9

Do application and operating system patches come from the vendor or vmware.com?

Answer 9

Vendor

Question 10

T/F? You can only install Update Mgr on the same computer as vCenter Server.

Answer 10

False

Question 11

Update Mgr can only be installed on a _____ machine.

Answer 11

64 bit

Question 12

How many cores and what speed do they each have to have for Update Manager?

Answer 12

2 or more cores; 2 GHz

Question 13

If
Update Manager and vCenter Server are on different machines, ___ RAM is required. If they are Q on the same machine, ___ of RAM is required.

Answer 13

2 GB; 4GB

Question 14

You need at least ____GB of free space to store patch data for Update Manager

Answer 14

20

Question 15

Before installing Update Mgr, you must create a ____ _____ and configure it to ensure that all Update Mgr ____ _____ are placed into it.

Answer 15

database instance; database tables

Question 16

Update Mgr Server supports the following 4 databases:

Answer 16

SQL Server ‘05, SQL Server ‘08, Oracle 10g, Oracle 11g

Question 17

How many hosts and vm’s can update mgr handle? (Small scale environment)

Answer 17

5 hosts; 50 vm’s

Question 18

What 5 pieces of info do you need when installing Update Mgr?

Answer 18

vCenter Server IP addy or host name, port numbers, admin credentials, DNS name, andcredentials for the database the update mgr will work with.

Question 19

T/F? You can configure Update Mgr to work with an Internet Proxy Server during the installation.

Answer 19

True

Question 20

The Update Manager client component is delivered as a ___ for the vSphere client

Answer 20

plug-in

Question 21

7 Administrative settings can be modified for update mgr. (Under configuration tab):

Answer 21

Network Connectivity, Patch Download Settings, Patch Download Schedule, Notification Check Schedule, VM Settings, ESX Host/Cluster Settings, and vApp settings.

Question 22

baselines contain a collection of one or more ___,___,___ ___, ___ ___,

Answer 22

patches, extensions, service packs, bug fixes or upgrades.

Question 23

5 types of baslines are:

Answer 23

host patch, host extension, host upgrade, VM patch, virtual appliance upgrade

Question 24

Can a baseline group contain one upgrade baseline per type and one or more patch & extension baselines?

Answer 24

Yep.

Question 25

When you scan hosts, virtual machines, and virtual appliances, you evaluate them against _____ a nd ___ ___ to determine their level of compliance.

Answer 25

baselines and baseline groups

Question 26

______ can be classified as Upgrade, extension or patch

Answer 26

baselines

Question 27

A set of patches to apply to a host or set of hosts, based on applicability

Answer 27

Host patch —

Question 28

A fixed set of extensions for your ESXIESXi host

Answer 28

Host extension —

Question 29

An upgrade release that allows you to upgrade hosts to a particular release version

Answer 29

Host upgrade —

Question 30

A set of patches that apply to one or more virtual machines, based on applicability

Answer 30

Virtual machine patch —

Question 31

A set of patches to the operating system or application in the virtual appliance

Answer 31

Virtual appliance upgrade —

Question 32

Baseline groups might contain one ___ ____ per type and one or more ____ and ___ ___, or a combination of ____ ___ and _____ ____.

Answer 32

upgrade baseline, patch; extension baselines; multiple patch extension baselines

Question 33

Admins can do what with their baselines and baseline groups? (5 actions)

Answer 33

create edit delete attach or detatch

Question 34

2 types of patch options when creating a patch baseline:

Answer 34

fixed or dynamic

Question 35

With a ____patch baseline, the user manually specifies all updates included in the baseline from all the patches available in Update Manager.

Answer 35

fixed

Question 36

.A _____ baseline is updated when new patches meeting the specified criteria are added to the repository.

Answer 36

dynamic

Question 37

Attaching a | baseline to a ___ ____ attaches the baseline to ___ _____ in the container.

Answer 37

container object, all objects

Question 38

_____ is the process in which attributes of a set of hosts, virtual machines, or virtual appliances are evaluated against patches, extensions, and upgrades in the attached baselines and baseline groups.

Answer 38

Scanning

Question 39

If the object that you select is a container object, all ____ ______ are also scanned.

Answer 39

child objects

Question 40

What is the path to schedule a scan for updates?

Answer 40

Home>Mgmt>Scheduled Tasks>New>Scan for Updates

Question 41

Using a_____ baseline, instead of a | ____ baseline, discovers new vulnerabilities and needed updates.

Answer 41

dynamic ; fixed

Question 42

____allows you to download the patches and extensions from the Update Manager server to the Q ESXJESXi hosts, without applying the patches and extensions immediately

Answer 42

Staging

Question 43

You can reduce the downtime during remediation by ___ ____ ___ ______ whose installation requires that a host enter maintenance mode

Answer 43

staging patches and extensions

Question 44

For ESXIESXi hosts in a cluster, the remediation process is ______

Answer 44

sequential.

Question 45

When you remediate hosts against baseline groups containing an upgrade baseline and patch or extension baselines, the _____ is performed.

Answer 45

upgrade

Question 46

For multiple clusters under a datacenter, the remediation processes run in ____

Answer 46

parallel.

Question 47

To remediate virtual machines and virtual appliances together they must be in one container,

Answer 47

True

Question 48

____ are a type of virtual machine, so they can be remediated.

Answer 48

Templates

Question 49

You can force | ______ ____ and _____ virtual machines to power on for remediation.

Answer 49

powered off and suspended

Question 50

for __ and ___ OS's, the gues agent is automatically installed the first time a patch remediation is scheduled.

Answer 50

Linux and windows

Question 51

___ of ____ in a cluster requires that you temporarily disable cluster features like VMware DPM and VMware HA admission control.

Answer 51

remediation of hosts

Question 52

When remediating hosts in a cluster, you must temporarily disable these features: (3)

Answer 52

FT, VMWare DPM, VMware HA

Question 53

When patches with problems or potential problems are released, these patches are recalled in the ____, and Update Manager marks them as recalled.

Answer 53

metadata

Question 54

You can change the notification for recalls schedule by modifying the ___ ___ ___ setting in ___ ___ ___ tab

Answer 54

Notification Check Schedule; Update Manager’s Configuration

Question 55

Update Manager also deletes all the recalled patches from the Update Manager patch ____

Answer 55

repository.

Question 56

Virtual | machines cannot run when a host is in ____ mode.

Answer 56

maintenance

Question 57

vCenter Server can migrate the virtual machines if the cluster is configured for ___ and if ___ and ___ are enabled.

Answer 57

vMotion; VMware Distributed Resource Scheduler (DRS); VMware Enhanced vMotion Compatibility (EVC)

Question 58

___ guarantees that the CPUs | of the hosts are compatible

Answer 58

EVC