Your company will soon start moving critical systems Into Oracle Cloud Infrastructure (OCI) platform. These systems will reside in the us-phoenix-1and us-ashburn 1 regions. As part of the migration planning, you are reviewing the company's existing security policies and written guidelines for the OCI platform usage within the company. you have to work with the company managed key.
Which two options ensure compliance with this policy?

• A.When you create a new compute instance through OCI console, you use the default options for "configure boot volume" to speed up the process to create this compute instance.
• B.When you create a new block volume through OCI console, select Encrypt using Key Management checkbox and use encryption keys generated and stored in OCI Key Management Service.
• C.When you create a new compute instance through OCI console, you use the default shape to speed up the process to create this compute instance.
• D.When you create a new OCI Object Storage bucket through OCI console, you need to choose "ENCRYPT USING CUSTOMER-MANAGED KEYS" option.
• E.You do not need to perform any additional actions because the OCI Block Volume service always encrypts all block volumes, boot volumes, and volume backups at rest by using the Advanced Encryption Standard (AES) algorithm with 256-bit encryption.

Correct Answer: B,D

Block Volume Encryption
By default all volumes and their backups are encrypted using the Oracle-provided encryption keys. Each time a volume is cloned or restored from a backup the volume is assigned a new unique encryption key.
You have the option to encrypt all of your volumes and their backups using the keys that you own and manage using the Vault service.If you do not configure a volume to use the Vault service or you later unassign a key from the volume, the Block Volume service uses the Oracle-provided encryption key instead.

This applies to both encryption at-rest and in-transit encryption.
Object Storage Encryption
Object Storage employs 256-bit Advanced Encryption Standard (AES-256) to encrypt object data on the server. Each object is encrypted with its own data encryption key. Data encryption keys are always encrypted with a master encryption key that is assigned to the bucket. Encryption is enabled by default and cannot be turned off. By default, Oracle manages the master encryption key. However, you can optionally configure a bucket so that it's assigned an Oracle Cloud Infrastructure Vault master encryption key that you control and rotate on your own schedule.
Encryption: Buckets are encrypted with keys managed by Oracle by default, but you can optionally encrypt the data in this bucket using your own Vault encryption key. To use Vault for your encryption needs, select Encrypt Using Customer-Managed Keys. Then, select the Vault Compartment and Vault that contain the master encryption key you want to use. Also select the Master Encryption Key Compartment and Master Encryption Key.

Comment: *

Name: *

Email: *

Verification: *

The Finance department of your company has reached out to you. They have customer sensitive data on compute Instances In Oracle Cloud Infrastructure (OCI) which they want to store in OCI Storage for long term retention and archival.
To meet security requirements they want to ensure this data is NOT transferred over public internet, even if encrypted.
which they want to store In OCI Object Storage fin long term retention and archival To meet security requirements they want to ensure this data is NOT transferred over public Internet, even it encrypted.
Which option meets this requirements?

• A.Configure a NAT instance and all traffic between compute In Private subnet should use this NAT instance with Private IP as the route target.
• B.Use NAT gateway with appropriate route table when transferring data. Then use NAT gateways' toggle (on/off) once data transfer is complete.
• C.Use Service gateway with appropriate route table.
• D.Use Storage gateway with appropriate firewall rule.

Comment: *

Name: *

Email: *

Verification: *

You are a DevOps engineer working for a high tech company, and are using Terraform to maintain your Oracle Cloud Infrastructure (OCI) resources. You have created a Terraform script that would create the infrastructure for deploying a web service. But want to tune in some settings within the OCI Instances using a shell script.
How should you write your Terraform script to run the shell script on OCI instance?

• A.Use provisioner "remote-exec" in your code to run the shell script.
• B.Use provisioner "local-exec" in your code to run the shell script.
• C.Use resource "oci_core_instance" to create the instance and run the shell script.
• D.Use provisioner "oci-remote-exec" in your code to run the shell script.

Comment: *

Name: *

Email: *

Verification: *

You have deployed a web application targeting a global audience across multiple Oracle Cloud Infrastructure (OCI) regions.
You decide to use Traffic Management Geo-Location based Steering Policy to serve web requests to users from the region closets to the user. Within each region you have deployed a public load balancer with 4 servers in a backend set. During a DR test disable all web servers in one of the regions however, traffic Management does not automatically direct all users to the other region.
Which two are possible causes?

• A.You did not setup a Route Table associated with load Balancer's subnet
• B.You did not setup an HTTP Health Check associated with Load Balancer public IP in the disabled region.
• C.Rather than using Geo-Location based Steering Policy, you should use Failover Policy Type to serve traffic.
• D.One of the two working web servers In the other region did not pass Its HTTP health check
• E.You did not correctly setup the Load Balancer HTTP health check policy associated with backend set

Comment: *

Name: *

Email: *

Verification: *

You are using the Oracle Cloud Infrastructure (OCI) OS Management service to manage updates and patches for the Oracle Linux 8 environments on your compute instances in OCI. You have verified that the OS Management Service Agent (osms-agent) is installed and running properly in the instances.
One of the compute instances is not getting the updates from OS Management Service. You use the following command to validatethatyourinstance cannot reach the OS Management Ingestion service by running curl https://ingestion.osms.
<region>.oci.oraclecloud.com/
Which Is NOT a possible reason for this issue?

• A.The instance Is in a private subnet with a NAT gateway.
• B.The Instance is in a publicsubnet with an Internet gateway.
• C.The instance is in a private subnet with a service gatewaythat uses the All <region> Services in Oracle Services Network CIDR label.
• D.The instance is in a private subnet with a privateendpointwith security rules configured to access the OS Managementingestion service

Comment: *

Name: *

Email: *

Verification: *