1Z0-1104-25 Question 144
Single answerYou are the security lead for a large e-commerce platform running on Oracle Cloud Infrastructure. Your compliance team wants to immediately detect any misconfiguration in OCI resources, be alerted when the security posture is at risk, and automatically revert configurations back to approved baselines. Which solution best meets this requirement?
- A
Deploy Oracle Cloud Guard and configure detectors and responder rules to automatically discover and remediate security misconfigurations.
- B
Use Oracle Logging Analytics to parse system logs and write custom scripts to revert resource configurations.
- C
Leverage the OS Management service to patch operating systems and fix any compartment-level resource issues.
- D
Implement Oracle Resource Manager for all infrastructure provisioning and rely on manual checks for compliance detection.
Show answer and explanation
Correct answer: A
Explanation
Oracle Cloud Guard is specifically designed to detect, monitor, and automatically remediate security-related configuration issues in OCI. By setting up detectors and responder rules, you can respond quickly to security policy deviations. Refer to the official Oracle Cloud Infrastructure documentation on Cloud Guard for detailed setup and best practices.
- A. Correct.
Option 1 is correct. Oracle Cloud Guard continuously monitors OCI resources for risky configurations (using detectors) and can automatically remediate them (using responder rules). This provides real-time detection, alerting, and automated fixes for noncompliant resources.
- B. Incorrect.
Option 2 is incorrect. While Oracle Logging Analytics can help you collect and analyze logs, it does not provide built-in automated remediation for misconfigurations. You would still need a separate mechanism to revert resource settings back to an approved baseline.
- C. Incorrect.
Option 3 is incorrect. OS Management focuses on operating system patching and updates, not on detecting or remediating broader OCI resource misconfigurations at the compartment or service level.
- D. Incorrect.
Option 4 is incorrect. Oracle Resource Manager automates infrastructure provisioning using IaC templates, but it was not designed for real-time posture management or automated remediation after resources have been deployed.