1Z0-1104-25 Question 10
Single answerYour e-commerce company is deploying a customer-facing application on Oracle Cloud Infrastructure (OCI). During a security review, your team is uncertain about which security tasks they must handle versus those that Oracle handles. Under the OCI Shared Security Responsibility model, which of the following tasks is the customer responsible for?
- A
Ensuring physical security at the OCI data centers
- B
Managing and rotating user credentials within the OCI environment
- C
Maintaining and updating OCI� underlying hypervisor layer
- D
Providing uninterrupted power and network infrastructure at OCI facilities
Show answer and explanation
Correct answer: B
Explanation
In the OCI Shared Security Responsibility model, Oracle is responsible for the infrastructure, including the physical data center security, underlying network, and hypervisor. Customers, however, are responsible for securing their own workloads, data, and the configurations within their OCI tenancy. This includes managing user credentials, applying OS and application-level patches, and enforcing strong identity and access management policies. Refer to the official Oracle Cloud Infrastructure Security documentation (https://docs.oracle.com/en-us/iaas/Content/Security/Concepts/security_overview.htm) for detailed guidance on each party� responsibilities.
- A. Incorrect.
Incorrect. Oracle manages physical security at its data centers, including entry controls and on-premises security. Customers generally have no control or responsibilities in this area.
- B. Correct.
Correct. Under the shared responsibility model, customers must manage credentials, implement strong password policies, and perform periodic key rotations or secret management for their users in the OCI environment.
- C. Incorrect.
Incorrect. Oracle manages and patches the underlying hypervisor for its compute infrastructure. Customers do not maintain or update the hypervisor or other infrastructure layers.
- D. Incorrect.
Incorrect. Oracle is responsible for the physical infrastructure, power, and network connectivity at its data centers. Customers do not handle these aspects.