1Z0-1104-25 Question 133
Select 2Your organization has recently migrated several Oracle Database instances to OCI. You need to pinpoint where sensitive data resides and also evaluate database user accounts to minimize the risk of unauthorized access. Which two key OCI Data Safe functionalities can best address these requirements?
- A
Sensitive Data Discovery
- B
Real-time Intrusion Prevention for Database Connections
- C
User Assessment
- D
Automatic Database Patching
Show answer and explanation
Correct answers: A, C
Explanation
OCI Data Safe provides a comprehensive set of tools to address database security needs in Oracle Cloud Infrastructure. Sensitive Data Discovery and User Assessment specifically help locate and classify sensitive data, as well as identify misconfigurations, excessive privileges, or risky user accounts. For more detailed information, refer to the official Oracle Cloud Infrastructure Data Safe documentation (https://docs.oracle.com/en-us/iaas/Content/DataSafe/Concepts/datasafe.htm).
- A. Correct.
Sensitive Data Discovery is part of OCI Data Safe� core functionality. It scans your databases to identify, classify, and catalog sensitive data, making it easier to implement appropriate security measures. This directly addresses the need to locate sensitive information.
- B. Incorrect.
Real-time Intrusion Prevention for Database Connections is not a feature provided directly by OCI Data Safe. While Data Safe can help collect and analyze audit logs, it does not function as an inline intrusion prevention system for real-time traffic. Someone might mistakenly believe Data Safe offers IPS/IDS functionality, but that is typically handled by network firewalls or other dedicated security tools.
- C. Correct.
User Assessment helps you evaluate database user accounts, privileges, and configuration settings to identify potential risks. This feature aligns with the requirement to minimize unauthorized access by flagging high-risk accounts or misconfigurations.
- D. Incorrect.
Automatic Database Patching is not managed by OCI Data Safe. Database patching is handled either through OCI Database Cloud Service automation or by your own patching processes. Data Safe focuses on security assessments, data discovery, auditing, and related tasks, rather than applying patches.