You have successfully configured identity federation between Oracle Cloud Infrastructure (OCI) and Oracle Identity CloudServices (IDCS). A new project manager wants access to OCI for her team and provides the name of an existing group within IDCS to use when granting access.
How do you configure federation to allow the project team access to OCI resources?

• A.Create a newIAM group in OCI and map it to the existing IDCS group. Create a new policy in IDCS and reference the name of the IAM group.
• B.Create a new Identity and Access Management (IAM) policy in OCI and reference the name of the IDCS group in each policy statement.
• C.Create a new compartment in OCI with the same name as the existing IDCS group. Create an IAM policy that references the new compartment and the name of the IDCS group.
• D.Create a new IAM group in OCI and map it to the existing IDCS group. Create anew IAM policy and reference the name of the IAM group in each policy statement.

Correct Answer: D

Explanation
When working with your IdP, your administrator defines groups and assigns each user to one or more groups according to the type of access the user needs. Oracle Cloud Infrastructure also uses the concept of groups (in conjunction with IAM policies) to define the type of access a user has. As part of setting up the relationship with the IdP, your administrator can map each IdP group to a similarly defined IAM group,so that your company can re-use the IdP group definitions when authorizing user access to Oracle Cloud Infrastructure resources. Here's a screenshot from the mapping process:

Comment: *

Name: *

Email: *

Verification: *

You are a network architect andhave designed the network infrastructure of a three-tier application on Oracle Cloud Infrastructure (OCI). In the architecture, back-end DB servers are in a private subnet. One of your DB administrators requests to have access to OCI object storage service.
How can you meet this requirement?

• A.Add a new route rule to the private subnet route table to route default traffic to the internet gateway.
• B.Attach a public IP address to the instances in the private subnet, and then add a new route rule to the private subnet route table to route default traffic to the internet gateway.
• C.Create a dynamic routing gateway (DRG) and attach it to your virtual cloud network (VCN). Add a default route rule to the private subnets route table and set the target as DRG.
• D.Create a service gateway, add a new route rule to the private subnet route table that uses object storage as target type.

Comment: *

Name: *

Email: *

Verification: *

You have been tasked with creating one virtual cloud network (VCN) each for two line of business (LOB) applications. LOB A and LOB B will need to communicate with each other. To ensure that you can utilize VCN peering, which network CIDR ranges should be used?

• A.VCN A (10.0.0.0/16) and VCN B (10.1.0.0/16)
• B.VCN A (10.0.2.0/16) and VCN B (10.0.2.0/25)
• C.VCN A (10.0.0.0/16) and VCN B (10.0.16.0/24)
• D.VCN A (172.16.0.0/24) and VCN B (172.16.0.0/28)

Comment: *

Name: *

Email: *

Verification: *

Which statement is true about cloning a volume?

• A.Youneed to detach a volume before cloning from it.
• B.A cloned volume is the same as a snapshot that has a dependency on the source volume.
• C.You can change the block volume size when cloning a volume.
• D.You can create a clone for a volume across regions.

Comment: *

Name: *

Email: *

Verification: *

Which tool can automatically install Oracle Cloud Infrastructure CLI?

• A.Python
• B.RPM
• C.APT
• D.PIP

Comment: *

Name: *

Email: *

Verification: *