Question 1

According to the Oracle Cloud Infrastructure (OCI) Shared Responsibility Model, which statement accurately reflects OCI's responsibility for security?

Options :

A : OCI is responsible for securing the underlying infrastructure but not customer data.

B : Customers are responsible for securing both infrastructure and data.

C : OCI has no security responsibilities; customers need to secure their resources.

D : OCI provides security only for free-tier services; customers secure everything else.

Answer: A

Question 2

You are a security architect at your organization and have noticed an increase in cyberattacks on your applications, including Cross-Site Scripting (XSS) and SQL Injection. To mitigate these threats, you decide to use OCI Web Application Firewall (WAF). Which type of OCI WAF rule should you configure to protect against these attacks?

Options :

A : Access control rule

B : Protection rule

C : Rate Limiting rule

D : Encryption rule

Answer: B

Question 3

When trying to encrypt plaintext using Command Line Interface (CLI), the developer gets a Service Error. This is the command the developer tried to run: What is the reason for this error?

Options :

A : The developer forgot to specify the region.

B : The user should pass the key version OCID instead of the key OCID.

C : The developer has the wrong endpoint.

D : The plaintext needs to be in JSON form.

Answer: B

Question 4

In Oracle Cloud Infrastructure (OCI), bare metal instances provide customers with direct access to the underlying hardware. To mitigate security risks when a customer terminates a bare metal instance, OCI utilizes Root-of-Trust hardware. What is the primary function of the Root-of-Trust hardware in this context?

Options :

A : It automatically encrypts data at rest on the bare metal instance.

B : It ensures all non-volatile memory on the terminated instance is securely wiped before reuse.

C : It guarantees complete isolation between customer workloads on different instances.

D : It eliminates the need for hypervisors, reducing the potential attack surface.

Answer: B

Question 5

Within OCI IAM identity domains, the AD Bridge component serves a critical role. How does the AD Bridge functionality specifically enhance Identity and Access Management (IAM) practices?

Options :

A : It simplifies user provisioning by enabling automated synchronization of user accounts and group memberships from an existing Microsoft Active Directory (AD) environment.

B : It facilitates delegated administration, allowing authorized AD users to manage specific resources within the OCI identity domain.

C : It strengthens access security by providing an additional layer of authentication through AD integration.

D : It directly integrates with OCI MFA providers, allowing for seamless enforcement of MFA for users authenticated through AD credentials.

Answer: A