Oracle 1Z0-1072-25 Practice Exam Questions & Answers

Even after removing port 22 from the Security Lists, SSH was still possible because the Virtual Network Interface Card (VNIC) of the compute instance is attached to a Network Security Group (NSG).

NSGs: NSGs provide a more flexible and granular way to manage security rules compared to Security Lists. They allow you to apply security rules directly to VNICs associated with resources such as compute instances. If an NSG allows traffic on port 22, SSH will still be possible, regardless of the Security List settings.

Oracle Cloud Infrastructure Documentation: Security Lists and Network Security Groups

To protect your VM instance from low-level threats, such as rootkits and bootkits, you should create a shielded instance in Oracle Cloud Infrastructure (OCI). Shielded instances are designed to provide enhanced security features, including:

Secure Boot: Ensures that the instance boots only with trusted software.

Measured Boot: Records boot metrics, allowing verification that the instance has not been tampered with.

Trusted Platform Module (TPM): Provides additional security through cryptographic functions.

These features help protect against low-level threats that could compromise the integrity of the instance at boot time.

Oracle Cloud Infrastructure Documentation: Shielded Instances

When performing a multipart upload using the Multipart Upload API in Oracle Cloud Infrastructure (OCI) Object Storage, the following points are true:

C . Each part can be as large as 50 GiB: OCI allows each part of a multipart upload to be up to 50 GiB in size. This enables the efficient uploading of large objects in smaller, manageable parts.

D . You can keep adding parts as long as the total number is less than 10,000: The Multipart Upload API supports up to 10,000 parts for a single object. This allows the upload of very large objects by dividing them into multiple parts.

Incorrect Statements:

A . After uploading all parts, you must commit the upload to finalize the multipart upload and combine all parts into a single object.

B . The object must be split into parts before uploading when using the Multipart Upload API.

Oracle Cloud Infrastructure Documentation: Multipart Uploads

A Dynamic Routing Gateway (DRG) in Oracle Cloud Infrastructure (OCI) is a virtual router that provides a path for private traffic between your on-premises network and your VCN, or between your VCN and other VCNs. The resources that can be attached to a DRG include:

A . Virtual Circuits: Used to establish a private connection between your on-premises data center and your VCN via Oracle's FastConnect service.

D . Remote Peering Connections: Enables peering between VCNs located in different regions (Remote VCN Peering).

E . IPSec Tunnel: Facilitates secure VPN connections between your on-premises network and your OCI VCN.

Oracle Cloud Infrastructure Documentation: Dynamic Routing Gateway Overview

In Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM), administrator roles play a significant role in managing access:

Simplification of Access Management: Utilizing administrator roles allows you to simplify access management by eliminating the need to create complex IAM policies manually. These roles come with predefined permissions that cover common administrative tasks, reducing the effort needed to manage access controls.

Granular Control: While administrator roles provide a broad range of permissions, they may not offer the same level of granularity as custom policies.

Other Benefits:

Offer a wider range of permission combinations (A): While custom policies can offer more specific combinations, administrator roles are designed to cover a broad range of tasks.

Granting Access Outside Identity Domain (C): Administrator roles are generally scoped to their identity domain and do not provide cross-domain access.

Granular Control (D): Although administrator roles simplify management, custom policies are typically used when granular control over specific compartments or resources is needed.

Relevant OCI Documentation:

OCI IAM Roles Overview

This resource provides detailed information on how roles and policies are used in OCI to manage access.

The principle of least privilege is a security best practice that dictates that users should only be granted the minimum set of permissions necessary to perform their tasks. This principle helps to minimize the risk of accidental or malicious actions that could compromise security.

IAM Policies in OCI: When creating IAM policies in OCI, you should carefully evaluate the required permissions and only grant those that are absolutely necessary for the users or groups to perform their specific roles. This helps to reduce the attack surface and prevent unauthorized access to sensitive resources.

Oracle Cloud Infrastructure Documentation: Identity and Access Management (IAM) Best Practices

When ensuring that third-party APIs communicate securely with OCI resources, the appropriate authentication option is API Signing Key.

API Signing Key: This method uses an RSA key pair to authenticate and sign API requests. The API signing key provides a secure and reliable way to ensure that the API requests to OCI are coming from an authorized source. It is commonly used for programmatic access to OCI services.

Other Options:

SSH Key Pair: Primarily used for secure shell access to compute instances, not for API authentication.

Auth Tokens: Typically used for authentication in environments where APIs don't support the API Signing Key, such as OCI CLI or SDKs.

OCI Username and Password: Generally used for the Console login, not for securing API communications.

Relevant OCI Documentation:

API Signing Key Authentication

This documentation provides details on using API Signing Keys for secure API communication in OCI.