1Z0-1104-25 Question 172
Select 2You are responsible for security in a production tenancy running multiple Compute instances in Oracle Cloud Infrastructure (OCI). Your security policy mandates real-time alerts whenever a new Compute instance is created in the environment. You plan to use OCI Logging and Events to meet this requirement. Which two steps must you perform to ensure you receive immediate notifications when any new Compute instance is created? (Choose two.)
- A
Create a custom Log Group for your compartment and enable the 'Compute - Instance Lifecycle' service log.
- B
Configure an Event Rule that triggers when matching create events occur in 'Compute', and specify a Notifications topic as the action.
- C
Enable debugging logs on each running Compute instance to capture instance creation details locally.
- D
Configure custom metrics to emit a metric whenever a Compute instance is launched, and attach an alarm to this metric.
- E
Deploy an Auto Scaling Configuration to send alerts when new instances appear in the scaling group.
Show answer and explanation
Correct answers: A, B
Explanation
To securely monitor and alert on new OCI Compute instance creations, you should harness OCI Logging and Events. First, enable the appropriate service logs (e.g., 'Compute - Instance Lifecycle') in a Log Group to capture creation activities. Then configure an Event Rule that recognizes the creation event in the compute domain and publishes to an OCI Notifications topic or other supported destinations (email, Function, Slack, etc.). This approach ensures real-time awareness of new Compute resource activities, adhering to best practices outlined in Oracle Cloud Infrastructure documentation on Logging and Events.
- A. Correct.
Option 1 is correct. Creating a Log Group and enabling the 'Compute - Instance Lifecycle' service log at the compartment level ensures that all lifecycle events�such as instance creation�are centrally recorded in OCI Logging.
- B. Correct.
Option 2 is correct. OCI Events supports creating a rule that listens for specific resource state changes, like instance creation events for Compute. By specifying an OCI Notifications topic as the action, you will receive real-time alerts (e.g., email, PagerDuty, or Slack).
- C. Incorrect.
Option 3 is incorrect. Debugging logs on individual Compute instances do not capture the initial creation event on the OCI control plane. They mainly provide OS-level logging rather than cloud-level provisioning details.
- D. Incorrect.
Option 4 is incorrect. While custom metrics and alarms can monitor certain resource usage patterns, it is not the recommended approach for capturing and alerting on discrete resource provisioning events. OCI Logging and Events provide a more direct, reliable mechanism for this scenario.
- E. Incorrect.
Option 5 is incorrect. Auto Scaling alerts revolve around scale-out and scale-in events tied to threshold-based triggers, not specifically all new instance creations across the tenancy.