1Z0-1104-25 Question 99
Single answerYou have been tasked with granting a third-party auditor secure, short-term SSH access to a private compute instance in your VCN using OCI Bastion. The audit must remain strictly time-limited and end after 60 minutes. Which action correctly ensures that the auditor's session is automatically terminated after 60 minutes?
- A
Configure a Pre-Authenticated URL in Object Storage with a 60-minute expiry and provide that URL to the auditor for SSH connectivity.
- B
Set the maximum session duration to 60 minutes when creating the SSH session in the Bastion console.
- C
Create a dynamic group for the auditor's user account and revoke all access keys manually after 60 minutes.
- D
Set a custom network security group rule that blocks SSH traffic after 60 minutes of active session time.
Show answer and explanation
Correct answer: B
Explanation
To implement time-limited access using OCI Bastion, you specify the maximum session duration when configuring the SSH session. Bastion enforces that limit, terminating the connection once the allotted time has elapsed. For more information, refer to the official OCI Bastion documentation at https://docs.oracle.com/en-us/iaas/Content/Bastion/home.htm.
- A. Incorrect.
Incorrect. Pre-Authenticated URLs are used for providing temporary access to objects in Object Storage, not for SSH sessions through Bastion.
- B. Correct.
Correct. In OCI Bastion, you can specify a maximum session duration (e.g., 60 minutes) for SSH sessions. After this time elapses, the session is automatically terminated, fulfilling the requirement for time-limited access.
- C. Incorrect.
Incorrect. While you could manually revoke the auditor� credentials, this approach is error-prone and does not guarantee automatic termination exactly at the 60-minute mark.
- D. Incorrect.
Incorrect. Network security group (NSG) rules do not dynamically terminate ongoing SSH sessions based on elapsed time. NSGs provide static access rules, not time-bound session management.