1Z0-1104-25 Question 134
Select 2A healthcare organization is preparing for a regulatory audit of personal health information stored in an Oracle Autonomous Database within OCI. The security operations team is concerned about incorrectly assigned privileges at the database user level and the possibility of undiscovered sensitive data in the database. Which two OCI Data Safe functionalities can help address these concerns most effectively? (Choose two)
- A
Data Discovery and Classification
- B
Security Zones
- C
User Assessment
- D
Anti-DDoS
- E
Data Masking
Show answer and explanation
Correct answers: A, C
Explanation
OCI Data Safe provides multiple capabilities to secure and analyze your Oracle databases. In this scenario, "Data Discovery and Classification" helps locate and categorize sensitive information, while "User Assessment" audits database user privileges and configurations. These two functionalities directly address the issues of finding potentially undiscovered sensitive data and ensuring appropriate user privileges. For more details, consult the official OCI Data Safe documentation regarding Security Assessment, User Assessment, and Data Discovery features.
- A. Correct.
Data Discovery and Classification (Correct): This functionality scans databases to locate and classify sensitive data, such as personally identifiable information (PII). It helps meet compliance standards by identifying areas that need proper protection.
- B. Incorrect.
Security Zones (Incorrect): Security Zones in OCI enforce specific security policies at the tenancy level. They are not part of OCI Data Safe and do not directly address user privilege analysis or the discovery of sensitive data within the database.
- C. Correct.
User Assessment (Correct): This feature evaluates database user accounts for privilege configuration and potential vulnerabilities. It helps ensure that users follow least-privilege principles, addressing the organization's concern about improperly assigned privileges.
- D. Incorrect.
Anti-DDoS (Incorrect): OCI offers network-level Distributed Denial of Service protection, but this is outside the scope of OCI Data Safe. It� unrelated to auditing user privileges or discovering sensitive database data.
- E. Incorrect.
Data Masking (Incorrect): While Data Masking in OCI Data Safe is useful to anonymize sensitive data in non-production environments, it does not directly address discovering where sensitive data resides or evaluating user privileges.