1Z0-1104-25 Question 163
Select 2You are the security lead for a company running several critical applications on OCI Compute instances. A major marketing event is expected to drive a sharp increase in traffic next week. You need to utilize OCI Monitoring to track CPU utilization and promptly alert your security team if any thresholds are breached. Additionally, you want to ensure only authorized administrators can modify alarm settings to maintain a secure configuration. Which two actions should you take to meet these requirements?
- A
Create an alarm on the CPUUtilization metric for each relevant compartment with a threshold, then configure an OCI Notification topic for the security team to receive alerts.
- B
Grant the Monitoring_Administrator role to all OCI users so each user can create or modify alarms and respond to potential performance issues in real time.
- C
Define an IAM policy allowing only the designated security group to manage alarms in the specified compartments, ensuring restricted access to alarm configurations.
- D
Set up custom alarms without specifying a namespace, relying on default Monitoring settings to track CPU usage and alert the security team.
- E
Configure the alarm to evaluate CPU utilization once a week, relying on external logs for any urgent notifications.
Show answer and explanation
Correct answers: A, C
Explanation
To effectively track performance and secure monitoring data in OCI, you need to create alarms for critical performance metrics like CPUUtilization and configure notifications so your team receives immediate alerts. Additionally, defining restrictive IAM policies ensures only authorized administrators can create or change alarms. For additional guidance, refer to the Oracle Cloud Infrastructure Monitoring and IAM best practices documentation.
- A. Correct.
Option 1 is correct. Creating an alarm on the CPUUtilization metric with an appropriate threshold and configuring an OCI Notification topic ensures real-time alerts are sent when usage exceeds the defined threshold. This lets the security team quickly respond to abnormal spikes.
- B. Incorrect.
Option 2 is incorrect. Granting the Monitoring_Administrator role to all users violates the principle of least privilege and weakens security. Only necessary personnel should have permissions to modify alarm settings.
- C. Correct.
Option 3 is correct. Restricting the ability to create and change alarms to a specific security group through an IAM policy ensures that only approved administrators can manage alarms, safeguarding the configuration from unauthorized changes.
- D. Incorrect.
Option 4 is incorrect. When setting up custom alarms, you should specify a proper namespace to organize and properly identify metrics. Relying on default settings without a namespace can lead to confusion and inefficient metric management.
- E. Incorrect.
Option 5 is incorrect. Evaluating CPU utilization only once a week does not provide the timely alerts needed for immediate action. In a high-traffic event scenario, real-time or near real-time monitoring is essential.