Configuration of network security features, such as firewalls and security groups, within their cloud environment. -> Correct. Within the OCI Shared Security Model, the customer is responsible for securing their virtual cloud network (VCN) environment, which includes configuring network security features like firewalls (Security Lists and Network Security Groups) to protect their applications and data. Installation and maintenance of physical security measures at data center facilities. -> Incorrect. Physical security measures at OCI data centers, including building access controls and environmental controls, are Oracle's responsibility under the OCI Shared Security Model. Management of the underlying hardware's firmware updates and security patches. -> Incorrect. The management of hardware, including firmware updates and security patches for the physical servers used in OCI, is Oracle's responsibility. Customers are responsible for their virtual machines and containers. Ensuring the integrity of the underlying cloud infrastructure, including compute, storage, and network components. -> Incorrect. The integrity and security of the cloud infrastructure components (compute, storage, network) are managed by Oracle. Customers are responsible for the security configuration of their resources deployed on OCI. For a customer planning to deploy a highly available web application that requires automatic scaling and load balancing across multiple compute instances in Oracle Cloud Infrastructure (OCI), which service should they primarily utilize?
B. OCI Bare Metal Instances for both stateful and stateless components, with horizontal scaling C. OCI Functions for stateless components and OCI Autonomous Database for stateful components D. OCI Container Engine for Kubernetes (OKE) for stateless components and OCI Block Volume for stateful components Explanation: OCI Functions for stateless components and OCI Autonomous Database for stateful components -> Correct. OCI Functions provide serverless execution ideal for stateless components, ensuring scalability and cost -efficiency. OCI Autonomous Database offers high availability, automatic scaling, and data management for stateful components, satisfying the requirements for handling peak loads and ensuring continuous availability. OCI Virtual Machine (VM) Instances for both stateful and stateless components, with manual scaling -> Incorrect. While VM instances can host both component types, manual scaling does not offer the required elasticity or high availability across Availability Domains to handle peak loads efficiently. OCI Container Engine for Kubernetes (OKE) for stateless components and OCI Block Volume for stateful components -> Incorrect. OCI Container Engine for Kubernetes is ideal for managing stateless components; however, OCI Block Volume alone does not provide compute capabilities for stateful components and requires VMs or bare metal servers for hosting applications. OCI Bare Metal Instances for both stateful and stateless components, with horizontal scaling -> Incorrect. Although bare metal instances provide high performance, using them for both component types without specifying auto-scaling does not address the need for seamless handling of peak loads or the flexibility required for high availability across Availability Domains. You are configuring storage solutions in Oracle Cloud Infrastructure (OCI) for a variety of use cases. Which of the following is not a storage option offered by OCI?
Which two features are part of the Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) services, specifically designed to manage users, groups, and permissions within the cloud environment? Select two.
API Signing Keys -> Incorrect. API Signing Keys secure API calls but are not related to managing user access based on roles, locations, or time constraints. In the Oracle Cloud Infrastructure (OCI) Shared Security Model, which two of the following responsibilities are explicitly the customer's to ensure their cloud environment's security and compliance? Select two.
performance and user experience. Distribute resources across multiple Internet Gateways -> Incorrect. Internet Gateways facilitate outbound and inbound internet traffic to the VCN, but do not address global latency reduction or traffic distribution. Implement Route Tables for global data routing -> Incorrect. Route Tables direct traffic within a VCN but are not designed to reduce latency for global users specifically. Deploy services in a single region, using multiple Virtual Cloud Networks (VCNs) -> Incorrect. While deploying in multiple VCNs may improve organizational or security structure, it does not address global latency issues. In the Oracle Cloud Infrastructure (OCI) Shared Security Model, which of the following best represents the customer's responsibility?
➢ TOTAL QUESTIONS:250 Which statement is NOT true about compartments in Oracle Cloud Infrastructure?
