1Z0-1104-25 Question 97
Single answerYour team needs temporary SSH access to a private compute instance for troubleshooting a production issue. They require exactly 30 minutes of access and must not retain any long-term keys. Which approach ensures the session will automatically terminate after the allotted time using OCI Bastion?
- A
Create a Bastion session with the default time of 3 hours and rely on the team to log out after 30 minutes.
- B
Add the team to a dynamic group with appropriate policies and remove them from the group when 30 minutes have passed.
- C
Create a Bastion session with a custom time set to 30 minutes, distributing the ephemeral session details to the team.
- D
Set up a permanent SSH key within the instance and instruct the team to delete it after 30 minutes.
Show answer and explanation
Correct answer: C
Explanation
OCI Bastion allows you to create ephemeral sessions to provide SSH access without managing long-term credentials. By specifying a custom session time (from 15 minutes up to 3 hours), you ensure that access automatically ends without relying on manual intervention. Refer to the official Oracle Cloud Infrastructure documentation on OCI Bastion for details on configuring ephemeral sessions and time limits.
- A. Incorrect.
Incorrect: Relying on the default 3-hour window does not enforce a strict 30-minute limit. Users could remain connected after 30 minutes, creating a security risk.
- B. Incorrect.
Incorrect: While dynamic groups and policies can grant temporary access, manual removal after 30 minutes is prone to human error and lacks automatic termination.
- C. Correct.
Correct: OCI Bastion supports time-limited ephemeral sessions. Configuring a session for exactly 30 minutes forces an automatic disconnect once it expires, meeting the time-limited access requirement.
- D. Incorrect.
Incorrect: Permanently setting up SSH keys and then removing them after 30 minutes is manual and less secure. Bastion ephemeral keys are preferred for controlled, time-bound access.