Governance And Administration

Which OCI construct serves as the root container for all your cloud resources and acts as the logical boundary for managing users, groups, and compartments?

Which THREE actions can be performed using OCI Audit log data? (Choose three.)

An enterprise has multiple child compartments under a root tenancy. A security administrator wants to ensure that a specific IAM policy written in the root tenancy cannot be overridden or weakened by child compartment policies. How does OCI handle policy evaluation across hierarchical boundaries?

A new employee joins the finance team and needs access to OCI resources that the finance group already has permissions for. The administrator wants the employee to inherit exactly the same access as the rest of the team. What is the correct action?

Which TWO methods can be used to authenticate users accessing OCI services? (Choose two.)

Your organization wants to ensure that a development team cannot provision compute instances with more than 4 OCPUs in the 'Staging' compartment, regardless of what their IAM policies allow. Which OCI governance feature should you implement?

A cloud administrator is preparing to onboard a new department into an existing OCI tenancy. To follow Oracle's governance guidance, which TWO practices should the administrator apply when creating the department's compartment structure? (Choose two.)

Your company has deployed resources across multiple compartments in Oracle Cloud Infrastructure (OCI). You need to track operational costs and allocate cloud spend back to specific business units using metadata key-value pairs attached to resources. Which OCI feature should you use?

Your organization uses federated identity with an external SAML 2.0 identity provider (IdP). A user leaves the company, and their account is disabled in the corporate IdP. What happens when that user attempts to access OCI via the federated login?

A finance team needs a consolidated, near-real-time view of all OCI costs broken down by the compartment that incurred them, and they want to save and share this view with other team members without exporting spreadsheets. Which OCI service should they use?

An auditor needs to verify who deleted a critical production virtual cloud network (VCN) yesterday. Which OCI service should the auditor query to find this exact API event history?

An administrator wants to move a Virtual Cloud Network (VCN) from 'CompartmentA' to 'CompartmentB'. What is the primary prerequisite that must be met for this move to succeed?

Which TWO tools can you use to analyze and track Oracle Cloud Infrastructure costs and spending? (Choose two.)

An administrator wants to ensure that all Audit log events in the tenancy are archived to an Object Storage bucket for long-term retention and compliance. How should this be configured?

An administrator needs to grant a group of database administrators the ability to manage Autonomous Databases only within a specific compartment named DevCompartment, without giving them access to any other resources in that compartment. Which IAM policy statement achieves this requirement?

What is the name of the file format used by OCI Usage Reports that allows financial teams to ingest cloud spending data into spreadsheet and BI tools?

An administrator must ensure that members of a development group can create and delete compute instances in the 'Dev' compartment but must not be able to change the security rules of the VCN that those instances use. The group already has no policies. Which combination of policy statements achieves this?

Which OCI administrative feature allows you to organize and categorize cloud resources using user-defined key-value pairs for granular tracking and automation?

Where in the OCI Console can an administrator view current service limits, usage, and request a service limit increase?

Which TWO types of tags are supported in Oracle Cloud Infrastructure? (Choose two.)

Which OCI service provides security diagnostic and compliance evaluation tools by continuously monitoring resources against security best practices and industry benchmarks?

You created a Defined Tag namespace called 'Department' and a key called 'CostCenter'. However, developers are forgetting to add these tags when creating compute instances. How can you ensure that every new compute instance created in a specific compartment automatically receives these tags without relying on manual user input?

You need to grant an external auditing firm read-only access to view all resources across your entire OCI tenancy without allowing them to make any changes. What is the most efficient way to achieve this?

Which THREE features are associated with OCI Defined Tags and Tagged-Based Access Control (TBAC)? (Choose three.)

A junior cloud engineer has just joined a tenancy and needs to sign in to the OCI Console. The identity administrator wants to grant the engineer access without creating a separate local OCI password. Which identity type should the administrator federate with OCI Identity and Access Management to achieve this?

You need to export billing and usage data automatically every day into an Object Storage bucket for custom financial analysis and reporting. Which OCI feature facilitates this?

Which TWO statements are correct regarding OCI Budgets and spending alerts? (Choose two.)

Which OCI service provides native tools to monitor resource metrics (such as CPU utilization) and trigger alarms when thresholds are breached?

You want to delegate the ability to create and manage sub-compartments within an existing compartment called 'AppCompartment' to a lead architect, without granting them full tenancy administration rights. How should you write this IAM policy?

Which THREE features are provided by OCI Cloud Guard to help secure a tenancy? (Choose three.)

You want to organize your OCI resources so that all networking components belong to one administrative boundary, security tools belong to another, and application workloads belong to a third. Which OCI entity is specifically designed to isolate resources for administrative and security delegation?

An administrator creates a new dynamic group with matching rules, but instances belonging to that group are not receiving the permissions granted by the policy referencing the dynamic group. What is the most likely cause?

You have a parent compartment named 'ParentComp' and a child compartment named 'ChildComp'. If you write an IAM policy at the root tenancy level granting a group access to 'ParentComp', what is the inheritance rule regarding 'ChildComp'?

Which TWO statements describe OCI Service Limits? (Choose two.)

You want to ensure that any compute instance launched by the data science team is automatically tagged with a specific project code, without requiring manual tagging by the users. Which OCI governance mechanism is best suited for this?

Your organization wants to receive an email alert whenever monthly cloud spending reaches 80% of a specified $5,000 threshold. Which OCI tool should you configure?

A security administrator needs to ensure that users configure Multi-Factor Authentication (MFA) for their OCI accounts to enhance login security. Where is MFA managed in OCI?

An administrator is preparing to use OCI Tag Defaults so that resources created by the application team are automatically tagged with the correct cost center and environment values. Which TWO statements about how Tag Defaults behave are correct? (Choose two.)

Which THREE components are required when writing an OCI IAM policy statement? (Choose three.)

Which OCI tool can you use to visualize your monthly cloud spend trends, filter costs by compartments, and examine expenses broken down by specific services?

Which OCI Console menu section should an administrator navigate to in order to create and manage user groups, compartments, and IAM policies?

What is the primary purpose of the OCI Vault service in relation to administrative governance?

Which THREE best practices should be followed when designing an OCI compartment hierarchy and IAM policy structure? (Choose three.)

Your organization wants to ensure that all resources tagged with `Environment: Production` cannot be deleted accidentally by any user, including administrators. Which OCI feature can help achieve protection against accidental deletion?

Which OCI service allows you to define and run infrastructure as code (IaC) using Terraform configurations natively managed inside your tenancy?

Which TWO options are valid methods for organizing and managing infrastructure configuration in OCI? (Choose two.)

You are designing an OCI compartment hierarchy. A junior administrator suggests creating a 7-level deep nested compartment structure to isolate every individual microservice environment. According to OCI best practices, what is the recommended maximum depth for a compartment hierarchy?

A security administrator in a large tenancy must determine which principal performed a specific DeleteBucket operation on an Object Storage bucket three weeks ago. The tenancy has Audit retention set to 90 days and no external SIEM integration. Where should the administrator look to find this information?