You have successfully configured identity federation between Oracle Cloud Infrastructure (OCI) and Oracle Identity Cloud Services (IDCS). A new project manager wants access to OCI for her team and provides the name of an existing group within IDCS to use when granting access.
How do you configure federation to allow the project team access to OCI resources?

• A.Create a new IAM group in OCI and map it to the existing IDCS group. Create a new policy in IDCS and reference the name of the IAM group.
• B.Create a new Identity and Access Management (IAM) policy in OCI and reference the name of the IDCS group in each policy statement.
• C.Create a new compartment in OCI with the same name as the existing IDCS group. Create an IAM policy that references the new compartment and the name of the IDCS group.
• D.Create a new IAM group in OCI and map it to the existing IDCS group. Create a new IAM policy and reference the name of the IAM group in each policy statement.

Correct Answer: D

When working with your IdP, your administrator defines groups and assigns each user to one or more groups according to the type of access the user needs. Oracle Cloud Infrastructure also uses the concept of groups (in conjunction with IAM policies) to define the type of access a user has. As part of setting up the relationship with the IdP, your administrator can map each IdP group to a similarly defined IAM group, so that your company can re-use the IdP group definitions when authorizing user access to Oracle Cloud Infrastructure resources. Here's a screenshot from the mapping process:

Comment: *

Name: *

Email: *

Verification: *

Which two use Oracle dynamic routing gateway (DRG) for connectivity? (Choose two.)

• A.Remote virtual cloud network (VCN) peering across region
• B.Oracle IPsec VPN
• C.Local VCN peering
• D.Oracle Cloud Infrastructure FastConnect public peering

Comment: *

Name: *

Email: *

Verification: *

How can you provide users access to an existing compartment?

• A.by granting users access to a compartment when the compartment is created
• B.by adding users to a group and defining a policy to provide the group access to the compartment
• C.by adding users to a compartment. All users in the compartment will have access to the objects in the compartment.
• D.by granting access directly to the user when the user is created

Comment: *

Name: *

Email: *

Verification: *

Which statement is true about Oracle Cloud Infrastructure Object Storage Service?

• A.Data retrieval in Archive Object Storage is instantaneous.
• B.You cannot directly download an object from an Archive Object Storage bucket.
• C.An Archive Object Storage tier bucket can be upgraded to the Standard Object Storage tier.
• D.An existing Standard Object Storage tier bucket can be downgraded to the Archive Object Storage tier.

Comment: *

Name: *

Email: *

Verification: *

You have an instance running in a development compartment that needs to make API calls against other OCI services, but you do not want to configure user credentials or a store a configuration file on the instance. How can you meet this requirement?

• A.Create a dynamic group with matching rules to include your instance
• B.Instances can automatically make calls to other OCI services
• C.Instances are secure and cannot make calls to other OCI services
• D.Create a dynamic group with matching rules to include your instance and write a policy for this dynamic group

Comment: *

Name: *

Email: *

Verification: *