Exam 1z0-1072-21 topic 1 question 19 discussion

Actual exam question from Oracle's 1z0-1072-21

Question #: 19
Topic #: 1

You have three compartments: ProjectA, ProjectB, and ProjectC. For each compartment, there is an admin group set up: A-Admins, B-Admins, and C-Admins.
Each admin group has full access over their respective compartments as shown in the graphic below.
Your organization has set up a tag namespace, EmployeeGroup.Role and all your admin groups are tagged with a value of ‘Admin’.

You want to set up a Test compartment for members of the three projects to share, and need to give admin access to all three of your existing admin groups.
Which policy should you write to accomplish this task?

A. Allow any-user to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role= ‘Admin’
B. Allow group any-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role= ‘Admin’
C. Allow all-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role= ‘Admin’
D. Allow dynamic-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role= ‘Admin’

Show Suggested Answer

Suggested Answer: A 🗳️

by sunny9331 at Jan. 4, 2023, 6:14 a.m.

Comments

Submit Cancel

sunny9331

Highly Voted 1 year, 1 month ago

Selected Answer: A

Isn't A the answer? I think A is the answer.

upvoted 7 times

WannaBeCertified

1 year, 1 month ago

it is A per OCI documentation https://docs.oracle.com/en-us/iaas/Content/Tagging/Tasks/managingaccesswithtags.htm

upvoted 3 times

...

slovik

Most Recent 6 months, 3 weeks ago

Selected Answer: A

According to https://docs.oracle.com/en-us/iaas/Content/Identity/Concepts/policysyntax.htm * all-group is not allowed by syntax * any-group is not allowed by syntax * dynamic group is for instances * only any-user is valid

upvoted 1 times

...

igorifilipovic

1 year ago

Answer is A