1Z0-1104-25 Question 13
Select 2A financial services company is designing a multi-tier application in Oracle Cloud Infrastructure (OCI). They want to ensure that a compromise in one tier does not grant an attacker full access to other resources and sensitive data. They also want each microservice to have only the minimal privileges necessary. Which TWO security design principles should be implemented to meet these requirements?
- A
Use a single compartment for all microservices to simplify administration
- B
Create fine-grained IAM policies and dynamic groups based on microservice responsibilities
- C
Restrict network access through Security Lists or Network Security Groups so only required traffic flows are permitted
- D
Grant broad administrative privileges to each microservice to streamline policy management
- E
Rely exclusively on transit encryption without enforcing encryption at rest
Show answer and explanation
Correct answers: B, C
Explanation
According to Oracle Cloud Infrastructure security design principles, adopting both defense-in-depth and least privilege is critical. Fine-grained IAM policies and dynamic groups (Option 2) tightly control each microservice's access. Restricting network access to only required communication paths (Option 3) further reduces exposure. Reference: Oracle Cloud Infrastructure Security Best Practices documentation, which emphasizes compartmentalization, least privilege, and layered controls for robust security.
- A. Incorrect.
Option 1: Incorrect. Placing all resources in a single compartment does not align with defense-in-depth and least privilege. If one component is compromised, it might lead to unauthorized access across all microservices. OCI best practices recommend using multiple compartments for better isolation and granular control.
- B. Correct.
Option 2: Correct. Fine-grained IAM policies ensure each microservice gets only the privileges it needs. Dynamic groups allow you to manage those privileges at scale across compartments and resources, which aligns with the least privilege principle.
- C. Correct.
Option 3: Correct. Restricting network access with Security Lists or Network Security Groups limits the communication paths available to attackers. Only required traffic flows between tiers, which embodies the defense-in-depth principle by minimizing exposure.
- D. Incorrect.
Option 4: Incorrect. Granting broad administrative privileges violates the principle of least privilege. It increases the attack surface and the potential damage if a microservice is compromised.
- E. Incorrect.
Option 5: Incorrect. Relying solely on transit encryption neglects the importance of encryption at rest. Oracle Cloud Infrastructure best practices recommend encrypting data in transit and at rest to protect data confidentiality against potential breaches.