Question 1

You have created compartment called Dev for developers. There are two IAM groups for developers:group-devl and group-dev2. You need to write an Identity and Access Management (IAM) policy to give usersin these groups access to manage all resources in the compartment Dev.Which of the following IAM policy will accomplish this?

Options :

A : Allow any-user to manage all resources in compartment Dev where request.group= /group-dev*/

B : Allow group group-devl group-dev2 to manage all resources in compartment Dev

C : Allow group /group-dev*/ to manage all resources in compartment Dev

D : Allow any-user to manage all resources in tenancy where target.comparment= Dev

Answer: B

Question 2

You are tasked with backing up your data using Oracle Cloud Infrastructure Block Volume service. When you are finalizing your block volume backup schedule, which of the following two are valid considerations for your backup plan? (Choose Two)

Options :

A : Number of stored backups: How many backups you need to keep available and the deletion schedule for those you no longer need

B : Governance: Tagging of backups so you can capture backup related API calls through the Audit service.

C : Frequency: How often you want to back up your data.

D : Location: Determine the ObjectStore Bucket where the backups will be stored.

E : Encryption: Whether to use your own key to encrypt your volume backups.

Answer: A,C

Question 3

Many development engineers are deploying new instances as part of their projects in Oracle CloudInfrastructure tenancy, but majority of these instances have not been tagged. You as an administrator of thistenancy want to enforce tagging to identify owners who are launching these instances.Which option below should be used to implement this requirement?

Options :

A : Create a predefined tag with tag variables to automatically tag a resource with usemame.

B : Create a default tag for each compartment which ensure appropriate tags are allowed at resource creation.

C : Create tag variables for each compartment to automatically tag a resource with user name.

D : Create an IAM policy to automatically tag a resource with the usemame.

Answer: A

Question 4

You have multiple IAM users who launch different types of compute Instances and block volumes every day.As a result, your Oracle cloud Infrastructure (OCF) tenancy quickly hit the service limit and you can no longercreate any new instances. As you are cleaning up environment, you notice that the majority of the Instancesand block volumes are untagged. Therefore, It is difficult to pinpoint the owner of these resources verify ifthey are safe to terminate.Because of this, your company has issued a new mandate, which requires adding compute instances.Which option is the simplest way to implement this new requirement?

Options :

A : Create a policy to automatically tag a resource with the user name.

B : Create a policy using IAMrequiring users to tag specific resources. This will allow a user to launch compute instances on\y if certain tags were defined.

C : Create tag variables to automatically tag a resource with the user name.

D : Create a default tag for each compartment, whichensure that appropriate tags are applied at resource creation

E : Create tag variables for each compartment to automatically tag a resource with the user name.

Answer: C

Question 5

A civil engineering company is running an online portal In which engineers can upload there constructionsphotos, videos, and other digital files.There is a new requirement for you to implement: the online portal must offload the digital content to anObject Storage bucket for a period of 72 hours. After the provided time limit has elapsed, the portal will holdall the digital content locally and wait for the next offload period.Which option fulfills this requirement?

Options :

A : Create a pre-authenticated URL for the entire Object Storage bucket to read and list the content with an expiration of 72 hours

B : Create a pre authenticated URL lot each object that Is uploaded to the Object Storage bucket with an expiration of 72 hours

C : Create a Dynamic Group with matchingrule for the portal compute Instance and grant access to the Object Storage bucket for 72 hours.

D : Create a pre authenticated URL for the entire Object Storage bucket to write content with an expiration of 72 hours.

Answer: D