1Z0-1104-25 Question 138
Select 2Your organization is migrating its financial databases to Oracle Cloud Infrastructure (OCI). You need to identify where personally identifiable information (PII) is stored and monitor how database users interact with this sensitive data to meet compliance requirements. Which two OCI Data Safe functionalities should you use to accomplish these goals?
- A
Data Masking
- B
Sensitive Data Discovery
- C
Database Auditing
- D
Security Assessment
Show answer and explanation
Correct answers: B, C
Explanation
OCI Data Safe offers multiple features to enhance database security. Sensitive Data Discovery allows you to locate and classify sensitive data within your database, while Database Auditing tracks how users interact with that data, ensuring compliance. For additional details, refer to Oracle� documentation on OCI Data Safe, specifically the sections on 'Sensitive Data Discovery' and 'Activity Auditing' for step-by-step guidance on configuring and interpreting results.
- A. Incorrect.
Option 1: Data Masking � Although Data Masking in OCI Data Safe is useful for protecting sensitive data by obfuscating it in non-production environments, it does not directly allow you to discover the data or monitor user activities, which is your primary requirement here.
- B. Correct.
Option 2: Sensitive Data Discovery � This is correct because OCI Data Safe� Sensitive Data Discovery automatically scans your database to identify and classify sensitive data such as PII, making it easier to ensure compliance and put appropriate safeguards in place.
- C. Correct.
Option 3: Database Auditing � This is correct because OCI Data Safe provides auditing capabilities to monitor and record database user activities, enabling you to track access to sensitive data and maintain compliance with regulatory requirements.
- D. Incorrect.
Option 4: Security Assessment � While Security Assessment helps evaluate database configuration, user roles, and privileges, it does not specifically discover sensitive data or track user activity on that data. Hence, it does not fully address the stated requirements.