Which statement is TRUE about delegating an existing domain to the Oracle Cloud Infrastructure (OCI) DNS service?
Correct Answer: A
Question 7
Why was SSH still possible after port 22 was removed from the Security Lists?
Correct Answer: C
Question 8
What is a key advantage of utilizing administrator roles for access control within OCI IAM identity domains?
Correct Answer: B
In Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM), administrator roles play a significant role in managing access: * Simplification of Access Management: Utilizing administrator roles allows you to simplify access management by eliminating the need to create complex IAM policies manually. These roles come with predefined permissions that cover common administrative tasks, reducing the effort needed to manage access controls. * Granular Control: While administrator roles provide a broad range of permissions, they may not offer the same level of granularity as custom policies. * Other Benefits: * Offer a wider range of permission combinations (A): While custom policies can offer more specific combinations, administrator roles are designed to cover a broad range of tasks. * Granting Access Outside Identity Domain (C): Administrator roles are generally scoped to their identity domain and do not provide cross-domain access. * Granular Control (D): Although administrator roles simplify management, custom policies are typically used when granular control over specific compartments or resources is needed. * Relevant OCI Documentation: * OCI IAM Roles Overview This resource provides detailed information on how roles and policies are used in OCI to manage access.
Question 9
Which statement accurately describes ephemeral principals?
Correct Answer: B
Question 10
Which components are required for establishing remote peering between two Virtual Cloud Networks (VCNs) in Oracle Cloud Infrastructure (OCI)?
Correct Answer: D
Remote peering in Oracle Cloud Infrastructure allows two VCNs in different regions to communicate securely. To establish remote peering, the following components are required: * Two VCNs with Nonoverlapping CIDRs: * The CIDR blocks of the two VCNs must not overlap. This is crucial to avoid routing conflicts and ensure that traffic is correctly routed between the VCNs. * Dynamic Routing Gateway (DRG) Attached to Each VCN: * A DRG is a virtual router that provides a path for traffic between the VCN and networks outside the VCN, such as other VCNs via remote peering, on-premises networks, or other cloud services. Each VCN needs its own DRG. * Remote Peering Connection (RPC): * An RPC is a specialized connection on the DRG used specifically for remote peering. You need to create an RPC on each DRG associated with the VCNs you wish to peer. * Connection Between RPCs: * Finally, a connection must be established between the RPCs of the two DRGs. This connection facilitates the secure and private exchange of traffic between the VCNs over Oracle's backbone network. * Incorrect Options: * Option Ainvolves a single VCN, which does not fulfill the requirement of remote peering between two VCNs. * Option Binvolves overlapping CIDRs and VPN gateways, which are incorrect for remote peering. * Option Csuggests peering within the same region, which would be considered local peering rather than remote peering. * Relevant OCI Documentation: * OCI Remote VCN Peering * Dynamic Routing Gateway (DRG) Overview These resources provide a detailed guide on configuring remote peering in OCI, ensuring secure and effective communication between VCNs across regions.