Question 1

An OCI administrator notices that a compute instance running in the production compartment is unable to create Object Storage buckets using the OCI CLI command:The error message returned states:"NotAuthorizedOrNotFound: You are not authorized to perform this action."The administrator verifies that the instance has Internet access and can reach OCI endpoints.What then could be causing the issue?

Options :

A : The instance is using the wrong OCI CLI authentication method.

B : The bucket name is already in use, causing a conflict.

C : The policy is written at the root compartment instead of the production compartment.

D : The instance is not part of any Dynamic Group or the matching rule is incorrect.

Answer: D

Question 2

In Oracle Cloud Infrastructure (OCI), bare metal instances provide customers with direct access to the underlying hardware. To mitigate security risks when a customer terminates a bare metal instance, OCI utilizes Root-of-Trust hardware. What is the primary function of the Root-of-Trust hardware in this context?

Options :

A : It automatically encrypts data at rest on the bare metal instance.

B : It ensures all non-volatile memory on the terminated instance is securely wiped before reuse.

C : It guarantees complete isolation between customer workloads on different instances.

D : It eliminates the need for hypervisors, reducing the potential attack surface.

Answer: B

Question 3

A company has deployed OCI Zero Trust Packet Routing (ZPR) to secure its network. They have two compute instances, VM1-01 and VM-02, in a public subnet. VM-01 is tagged with the security attribute app: vm01, and VM-02 is tagged with app:vm02. The VCN is labeled with network:vcn01, The ZPR policy states:"What is the expected outcome of this policy?

Options :

A : VM-02 can SSH into VM-01, but VM-01 cannot SSH into VM-02.

B : VM-01 can SSH into VM-02, but VM-02 cannot SSH into VM-01.

C : Both VM-01 and VM-02 can SSH into each other.

D : Neither VM-01 nor VM-02 can SSH into each other."

Answer: B

Question 4

Your organization needs to implement strong password policies for users in OCI. Which of the following statements is TRUE about password policies in OCI IAM?

Options :

A : Custom password policies allow for granular control over password complexity.

B : The default password policy cannot be modified.

C : Only one password policy can be applied to all users in a domain.

D : Simple password policies are suitable for production environments.

Answer: A

Question 5

You're managing an Oracle Cloud Infrastructure (OCI) environment where a public website hosts downloadable assets stored in Object Storage buckets. These buckets need to be publicly accessible for website visitors, but Cloud Guard keeps flagging them as security risks. How can Cloud Guard be configured to ignore problems specific to public buckets while still ensuring security checks are applied to other resources that require them?

Options :

A : A public bucket is a security risk, so Cloud Guard will keep detecting it.

B : Resolve or remediate the problems by making the buckets private.

C : Dismiss problems associated with those resources.

D : Fix the baseline by configuring the Conditional groups for the detector.

Answer: D