Examice

Exam 1z0-1072-20 All QuestionsBrowse all questions from this exam

Question 60

You are working for a financial institution that is currently running two web applications in Oracle Cloud Infrastructure (OCI). All resources were created in the root compartment.

Your manager asked you to deploy new resources to support a proof-of-concept (PoC) for Oracle FlexCube. You must ensure that the FlexCube resources are secured and cannot be affected by the team that manages the two web applications.

Which two tasks should you complete to ensure the required security of your resources? (Choose two.)

Create a new compartment for the two web applications and move the existing resources into the compartment. Deploy the FlexCube application into the root compartment. Create a new policy in the root compartment that gives the FlexCube project team the ability to manage all resources in the tenancy.

Create a new policy in the root compartment for the FlexCube project team. Assign a policy statement that grants the FlexCube project team the ability to manage all resources in the tenancy, where a specific tag key and tag value are present.

Create a Tag Default within the root compartment with a default value of ${iam.principle.name} so that each new resource created is tagged with the name of the person who created it. Create a new IAM policy that allows users to only modify resources they created.

Create a new compartment for the two web applications and move the existing resources into this compartment. Modify the existing policy for the team that manages these applications so that the scope of access is defined as this new compartment.

Create a new compartment for the FlexCube application deployment. Create a policy in this compartment for the project team that gives them the ability to manage all resources within the scope of this compartment.

Correct Answer: D, E

To ensure that the FlexCube resources are secured and cannot be affected by the team that manages the two web applications, you should create separate compartments for the FlexCube resources and the existing web applications. By isolating resources in different compartments, you can apply distinct security policies to each compartment. In this scenario, creating a new compartment for the two web applications and moving the existing resources into this compartment while modifying the existing policy to define the scope of access for the web applications team ensures they only have access to their own resources. Additionally, deploying the FlexCube application into a new compartment and creating a policy in this compartment that gives the FlexCube project team the ability to manage all resources within the scope of this compartment ensures that the FlexCube resources are secured and managed independently from the web applications.

Discussion

riso51Options: DE

DE is correct

LifOptions: DE

Agree with riso51 DE is correct

Davar39Options: CE

And now to confuse everybody, I think I will go with C&E since the team that will create the new required resources will be the only ones that can edit them.

FPM

"Create a new IAM policy that allows users to only modify resources they created" --> That wouldn't allow users from the web team to modify the resources of the web-apps unless THEY created the resources. What if it was the Admin (or any other Group not in the Webapp team) that created the resources? They wouldn't get access to it.

FPM

Therefore I would go for D and E (and not C)

sharma26Options: BE

BE Correct Answer, D is not correct as you have to move existing environment to New compartment

djera3Options: DE

D&E are true

Joe_QuOptions: CE

We all agree on E as a correct answer. The questions asks "Which two tasks should you complete to ..." . I understand that is a set of two complementary options. I also think that C is a valid answer and complements E