1Z0-1104-25 Question 156
Single answerYour organization recently imposed strict requirements on object storage configurations to prevent any public buckets. As part of this initiative, you created a Security Zone using Oracle's Maximum Security Zone recipe to ensure no future public buckets can be created in specific compartments. However, you also have compartments outside of the Security Zone that may contain existing public buckets. You want to identify and fix these resources. Which statement accurately describes how you can use Security Advisor to meet this objective?
- A
Configure a Security Zone for each existing compartment, and Security Advisor will automatically fix all noncompliant resources within those compartments.
- B
Use Security Advisor to scan compartments not in a Security Zone, generate a report of potential issues, and manually remediate as recommended.
- C
Create a policy that forces all compartments to be moved into an existing Security Zone before Security Advisor performs a scan.
- D
Rely on the Security Zone to retroactively detect and remediate public buckets in any compartment across your tenancy.
Show answer and explanation
Correct answer: B
Explanation
Security Advisor provides visibility and recommendations for existing resources across tenancy compartments, including those not covered by a Security Zone. It does not automatically fix misconfigurations, but it allows security professionals to identify and manually remediate noncompliant services (e.g., public Object Storage buckets). For more details, refer to the official Oracle Cloud Infrastructure documentation on Security Zones and the Security Advisor's usage patterns.
- A. Incorrect.
Incorrect. Although configuring a Security Zone will enforce rules for any new resources, Security Advisor does not automatically fix existing misconfigurations. It only provides recommendations.
- B. Correct.
Correct. Security Advisor can scan resources in compartments outside Security Zones, highlight noncompliant settings (like public buckets), and provide recommended steps for manual remediation.
- C. Incorrect.
Incorrect. You cannot forcibly move all compartments into a Security Zone as a general policy. Moving existing compartments to a Security Zone is optional and typically requires approval and planning to ensure no disruptions.
- D. Incorrect.
Incorrect. Security Zones do not retroactively enforce rules on resources outside their boundaries. They only govern resources created in or moved into the zone. Existing public buckets outside the zone will not be automatically remediated.