Exam 1z0-1072-20 All Questions

View all questions & answers for the 1z0-1072-20 exam

Exam 1z0-1072-20 topic 1 question 60 discussion

Actual exam question from Oracle's 1z0-1072-20

Question #: 60
Topic #: 1

You are working for a financial institution that is currently running two web applications in Oracle Cloud Infrastructure (OCI). All resources were created in the root compartment.
Your manager asked you to deploy new resources to support a proof-of-concept (PoC) for Oracle FlexCube. You must ensure that the FlexCube resources are secured and cannot be affected by the team that manages the two web applications.
Which two tasks should you complete to ensure the required security of your resources? (Choose two.)

A. Create a new compartment for the two web applications and move the existing resources into the compartment. Deploy the FlexCube application into the root compartment. Create a new policy in the root compartment that gives the FlexCube project team the ability to manage all resources in the tenancy.
B. Create a new policy in the root compartment for the FlexCube project team. Assign a policy statement that grants the FlexCube project team the ability to manage all resources in the tenancy, where a specific tag key and tag value are present.
C. Create a Tag Default within the root compartment with a default value of ${iam.principle.name} so that each new resource created is tagged with the name of the person who created it. Create a new IAM policy that allows users to only modify resources they created.
D. Create a new compartment for the two web applications and move the existing resources into this compartment. Modify the existing policy for the team that manages these applications so that the scope of access is defined as this new compartment.
E. Create a new compartment for the FlexCube application deployment. Create a policy in this compartment for the project team that gives them the ability to manage all resources within the scope of this compartment.

Show Suggested Answer

Suggested Answer: CD 🗳️

by riso51 at Dec. 13, 2020, 8:21 p.m.

Comments

Submit Cancel

riso51

Highly Voted 4 years, 1 month ago

DE is correct

upvoted 13 times

...

djera3

Most Recent 1 year, 2 months ago

D&E are true

upvoted 1 times

...

Joe_Qu

2 years, 8 months ago

We all agree on E as a correct answer. The questions asks "Which two tasks should you complete to ..." . I understand that is a set of two complementary options. I also think that C is a valid answer and complements E

upvoted 1 times

...

Lif

4 years ago

Agree with riso51 DE is correct

upvoted 3 times

...

Davar39

4 years ago

And now to confuse everybody, I think I will go with C&E since the team that will create the new required resources will be the only ones that can edit them.

upvoted 3 times

FPM

4 years ago

"Create a new IAM policy that allows users to only modify resources they created" --> That wouldn't allow users from the web team to modify the resources of the web-apps unless THEY created the resources. What if it was the Admin (or any other Group not in the Webapp team) that created the resources? They wouldn't get access to it.

upvoted 1 times

FPM

4 years ago

Therefore I would go for D and E (and not C)

upvoted 2 times

...

sharma26

4 years, 1 month ago

BE Correct Answer, D is not correct as you have to move existing environment to New compartment

upvoted 3 times

...

Exam 1z0-1072-20 All Questions

View all questions & answers for the 1z0-1072-20 exam

Exam 1z0-1072-20 topic 1 question 60 discussion

Comments

riso51

djera3

Joe_Qu

Lif

Davar39

FPM

FPM

sharma26

SY0-701