1Z0-1123-25 Question 110
Single answerYour organization runs a major data analytics platform in the Tokyo region on Oracle Cloud Infrastructure. Due to compliance requirements, you must keep an up-to-date copy of all non-sensitive data in the Phoenix region, while ensuring sensitive data is never replicated. Which approach should you implement to fulfill these requirements automatically whenever new objects are added or existing objects are overwritten in Tokyo?
- A
Use a single bucket containing both sensitive and non-sensitive data and rely on Object Lifecycle Policies to prevent sensitive objects from replicating.
- B
Manually copy objects to the Phoenix region using the OCI CLI or custom scripts each time new data is uploaded to the Tokyo bucket.
- C
Create two separate buckets in Tokyo: one for sensitive data without replication and another for non-sensitive data with cross-region replication enabled to Phoenix.
- D
Enable replication only for objects with specific tags, assuming objects without those tags remain unreplicated.
Show answer and explanation
Correct answer: C
Explanation
The best way to ensure compliance for sensitive data while automatically replicating non-sensitive data across regions is to separate data into different buckets. The bucket containing non-sensitive data can have the cross-region replication policy enabled, ensuring new or updated objects are automatically copied to the target region. Meanwhile, sensitive objects remain in a separate bucket with no replication policy. Refer to the Oracle Cloud Infrastructure documentation ("Using Bucket Replication") for configuring cross-region replication and best practices for structuring buckets to meet security and compliance requirements.
- A. Incorrect.
Option 1 is incorrect. Object Lifecycle Policies manage object retention and deletion schedules but cannot selectively exclude certain objects from a cross-region replication policy within the same bucket.
- B. Incorrect.
Option 2 is incorrect. Manually copying objects to the Phoenix region via the CLI or scripts does not provide automatic, continuous replication. It requires ongoing manual intervention or custom automation to track changes in real time.
- C. Correct.
Option 3 is correct. Creating a separate bucket for sensitive data with no replication policy, and another bucket for non-sensitive data with a cross-region replication policy, ensures that only non-sensitive data is automatically replicated to Phoenix.
- D. Incorrect.
Option 4 is incorrect. While tags can help organize or group objects, simply enabling replication based on tags is not an out-of-the-box feature for selectively excluding certain objects from a replicated bucket. Cross-region replication is configured at the bucket level, not per individual tags.