1Z0-1104-25 Question 11
Single answerYour organization is migrating a business-critical HR application to Oracle Cloud Infrastructure (OCI). The infrastructure team needs to ensure compliance with corporate security standards, including identity management, patch management, and data encryption. In this scenario, which of the following tasks falls under the customer� responsibility according to OCI� Shared Security Responsibility model?
- A
Ensuring the physical security of all OCI data centers servicing the HR application
- B
Patching and updating the underlying virtualization layer used by OCI
- C
Configuring access policies and managing user credentials for the HR environment
- D
Maintaining the hardware infrastructure that hosts the OCI network components
Show answer and explanation
Correct answer: C
Explanation
Under the OCI Shared Security Responsibility model, Oracle is responsible for the security of the underlying cloud infrastructure (physical security, hardware maintenance, patched virtualization layers), while customers are responsible for securing the workloads and configurations they place on OCI (managing access controls, passwords, and data). Refer to the official 'Security in Oracle Cloud Infrastructure' documentation for guidelines on correctly implementing identity policies and managing access in your tenancy.
- A. Incorrect.
Incorrect. Physical security of OCI data centers is handled by Oracle, as they own and operate the hardware and facilities. Customers do not have access to or responsibility for the physical infrastructure security of OCI data centers.
- B. Incorrect.
Incorrect. Oracle is responsible for patching and maintaining the underlying virtualization layer that supports OCI services. Customers do not manage this layer directly in a typical IaaS arrangement.
- C. Correct.
Correct. Configuring access policies and managing user credentials, especially within the customer� tenancy for the HR environment, is the customer� responsibility. This aligns with Oracle� Shared Responsibility model, where the customer must secure their own data, user access, and configurations on top of OCI� infrastructure.
- D. Incorrect.
Incorrect. Maintaining the hardware infrastructure�servers, networking devices, and storage at the physical layer�is Oracle� responsibility. Customers only interact at a logical or virtual level, not the physical hardware level.