1Z0-1104-25 Question 12
Select 2A retail company is migrating its on-premises e-commerce platform to Oracle Cloud Infrastructure (OCI). As the security lead, you need to ensure compliance with OCI� Shared Security Responsibility model. Which two responsibilities in this scenario would rest with your company's security team, rather than Oracle?
- A
Ensuring physical security at the OCI data centers
- B
Patching the operating system and applications on deployed Compute instances
- C
Maintaining and updating the underlying virtualization layer
- D
Configuring Identity and Access Management (IAM) and network security
- E
Monitoring and replacing defective physical hardware components
Show answer and explanation
Correct answers: B, D
Explanation
In the OCI Shared Security Responsibility model, Oracle is responsible for securing the underlying infrastructure (including physical data centers, networking, and hypervisors), while customers must secure what they deploy on OCI. This includes managing OS and application patches, configuring Identity and Access Management, securing data, and monitoring access. For more details, see Oracle's documentation on 'Shared Security Responsibility' in the Oracle Cloud Infrastructure Security Guide.
- A. Incorrect.
Option 1: Ensuring physical security at the OCI data centers is part of Oracle's responsibility. Oracle� team and processes handle physical access safeguards, environmental controls, and data center security, not the customer.
- B. Correct.
Option 2: Patching the operating system and applications on deployed Compute instances is the customer� responsibility. Once you provision an instance, maintaining and securing the guest OS and installed software falls under your purview.
- C. Incorrect.
Option 3: Maintaining and updating the underlying virtualization layer is handled by Oracle. They ensure that hypervisor patches and updates are applied to protect the infrastructure.
- D. Correct.
Option 4: Configuring Identity and Access Management (IAM) and network security is part of the customer� responsibilities. This includes setting up policies, users, groups, compartments, security lists, and network security rules to protect your resources within OCI.
- E. Incorrect.
Option 5: Monitoring and replacing defective physical hardware components is Oracle� responsibility. The cloud provider manages all physical infrastructure, including hardware lifecycle and repairs.