Governance And Administration

Your company has deployed resources across multiple compartments in Oracle Cloud Infrastructure (OCI). You need to track operational costs and allocate cloud spend back to specific business units using metadata key-value pairs attached to resources. Which OCI feature should you use?

You need to write an IAM policy that allows a group named 'NetworkAdmins' to manage all VCN components, but you want to ensure that this policy is only applicable when evaluated from the home region of the tenancy. How can you accomplish this using policy conditions?

An auditor needs to verify who deleted a critical production virtual cloud network (VCN) yesterday. Which OCI service should the auditor query to find this exact API event history?

Your organization wants to receive an email alert whenever monthly cloud spending reaches 80% of a specified $5,000 threshold. Which OCI tool should you configure?

Which OCI service provides security diagnostic and compliance evaluation tools by continuously monitoring resources against security best practices and industry benchmarks?

An administrator needs to grant a group of database administrators the ability to manage Autonomous Databases only within a specific compartment named DevCompartment, without giving them access to any other resources in that compartment. Which IAM policy statement achieves this requirement?

You are designing an OCI compartment hierarchy. A junior administrator suggests creating a 7-level deep nested compartment structure to isolate every individual microservice environment. According to OCI best practices, what is the recommended maximum depth for a compartment hierarchy?

Your organization wants to ensure that a development team cannot provision compute instances with more than 4 OCPUs in the 'Staging' compartment, regardless of what their IAM policies allow. Which OCI governance feature should you implement?

You created a Defined Tag namespace called 'Department' and a key called 'CostCenter'. However, developers are forgetting to add these tags when creating compute instances. How can you ensure that every new compute instance created in a specific compartment automatically receives these tags without relying on manual user input?

Which OCI construct serves as the root container for all your cloud resources and acts as the logical boundary for managing users, groups, and compartments?

You want to delegate the ability to create and manage sub-compartments within an existing compartment called 'AppCompartment' to a lead architect, without granting them full tenancy administration rights. How should you write this IAM policy?

Which OCI tool can you use to visualize your monthly cloud spend trends, filter costs by compartments, and examine expenses broken down by specific services?

An administrator wants to move a Virtual Cloud Network (VCN) from 'CompartmentA' to 'CompartmentB'. What is the primary prerequisite that must be met for this move to succeed?

Your organization uses federated identity with an external SAML 2.0 identity provider (IdP). A user leaves the company, and their account is disabled in the corporate IdP. What happens when that user attempts to access OCI via the federated login?

You are setting up OCI Budgets for multiple departments. You want a budget to evaluate spending based on the actual costs incurred plus estimated charges for resources that have been running during the month. Which budget calculation rule should you select?

An administrator wants to ensure that all Audit log events in the tenancy are archived to an Object Storage bucket for long-term retention and compliance. How should this be configured?

You need to grant an external auditing firm read-only access to view all resources across your entire OCI tenancy without allowing them to make any changes. What is the most efficient way to achieve this?

Which OCI administrative feature allows you to organize and categorize cloud resources using user-defined key-value pairs for granular tracking and automation?

You have a dynamic group named 'AppInstances' configured with the matching rule `instance.compartment.id = 'ocid1.compartment...'`. An instance is moved from this compartment into a different compartment. How quickly does OCI update the dynamic group membership for this instance?

Where in the OCI Console can an administrator view current service limits, usage, and request a service limit increase?

Your organization wants to ensure that all resources tagged with `Environment: Production` cannot be deleted accidentally by any user, including administrators. Which OCI feature can help achieve protection against accidental deletion?

What is the primary purpose of the OCI Vault service in relation to administrative governance?

You have a parent compartment named 'ParentComp' and a child compartment named 'ChildComp'. If you write an IAM policy at the root tenancy level granting a group access to 'ParentComp', what is the inheritance rule regarding 'ChildComp'?

Which OCI service allows you to define and run infrastructure as code (IaC) using Terraform configurations natively managed inside your tenancy?

You are writing an IAM policy for a group that needs to manage block storage volumes, but you want to ensure they can only perform these actions from a specific corporate IP address range (`192.168.1.0/24`). How should you write the policy condition?

An administrator wants to use Tagged-Based Access Control (TBAC) in OCI IAM policies. Which condition syntax is used in an IAM policy to check if a resource has a specific defined tag value during a request?

You need to export billing and usage data automatically every day into an Object Storage bucket for custom financial analysis and reporting. Which OCI feature facilitates this?

An administrator creates a new dynamic group with matching rules, but instances belonging to that group are not receiving the permissions granted by the policy referencing the dynamic group. What is the most likely cause?

Which OCI service provides native tools to monitor resource metrics (such as CPU utilization) and trigger alarms when thresholds are breached?

You want to organize your OCI resources so that all networking components belong to one administrative boundary, security tools belong to another, and application workloads belong to a third. Which OCI entity is specifically designed to isolate resources for administrative and security delegation?

What is the name of the file format used by OCI Usage Reports that allows financial teams to ingest cloud spending data into spreadsheet and BI tools?

A security administrator needs to ensure that users configure Multi-Factor Authentication (MFA) for their OCI accounts to enhance login security. Where is MFA managed in OCI?

Which TWO of the following statements are true regarding OCI Compartments? (Choose two.)

Which TWO tools can you use to analyze and track Oracle Cloud Infrastructure costs and spending? (Choose two.)

Which THREE components are required when writing an OCI IAM policy statement? (Choose three.)

Which TWO types of tags are supported in Oracle Cloud Infrastructure? (Choose two.)

Which TWO methods can be used to authenticate users accessing OCI services? (Choose two.)

Which THREE features are provided by OCI Cloud Guard to help secure a tenancy? (Choose three.)

Which THREE actions can be performed using OCI Audit log data? (Choose three.)

Which TWO statements are correct regarding OCI Budgets and spending alerts? (Choose two.)

Which THREE best practices should be followed when designing an OCI compartment hierarchy and IAM policy structure? (Choose three.)

Which TWO options are valid methods for organizing and managing infrastructure configuration in OCI? (Choose two.)

Which THREE features are associated with OCI Defined Tags and Tagged-Based Access Control (TBAC)? (Choose three.)

Which TWO statements describe OCI Service Limits? (Choose two.)

You want to ensure that any compute instance launched by the data science team is automatically tagged with a specific project code, without requiring manual tagging by the users. Which OCI governance mechanism is best suited for this?

Which OCI Console menu section should an administrator navigate to in order to create and manage user groups, compartments, and IAM policies?

An enterprise has multiple child compartments under a root tenancy. A security administrator wants to ensure that a specific IAM policy written in the root tenancy cannot be overridden or weakened by child compartment policies. How does OCI handle policy evaluation across hierarchical boundaries?