1Z0-1151-25 Question 2
Single answerYour organization plans to run core workloads on Oracle Cloud Infrastructure (OCI) and supplemental workloads on another leading cloud provider. The team wants to ensure consistent and secure identity management across both environments while minimizing manual administrative effort. Which approach provides a centralized identity solution for your new multi-cloud architecture?
- A
Manually synchronize separate identity providers on each cloud by exporting and importing user data on a weekly schedule
- B
Use Oracle Identity Cloud Service (IDCS) or an external Identity Provider that supports SAML/SCIM federation across clouds
- C
Create local user credentials in each cloud and rely on shared passwords for simplified access
- D
Disable multi-factor authentication (MFA) in both clouds to streamline the login experience for users
Show answer and explanation
Correct answer: B
Explanation
Centralizing identity management is critical for a multi-cloud strategy. By leveraging federation protocols like SAML or SCIM, organizations can extend or integrate their existing identity service (e.g., Oracle Identity Cloud Service) across different cloud providers. This reduces administrative overhead, enhances security, and aligns with Oracle Cloud Infrastructure and industry best practices. Refer to Oracle Identity Cloud Service documentation for more information on configuring federation (https://docs.oracle.com/en/cloud/paas/identity-cloud/).
- A. Incorrect.
Incorrect: Manually synchronizing separate identity providers is error-prone, time-consuming, and does not assure real-time updates or automated lifecycle management of user accounts. This approach risks configuration drift.
- B. Correct.
Correct: Implementing Oracle Identity Cloud Service (IDCS) or a trusted external provider with SAML or SCIM federation allows centralized identity management, reducing manual effort and supporting best practices for security and compliance. This is a commonly recommended approach for consistent identity across multiple clouds.
- C. Incorrect.
Incorrect: Creating separate local credentials in each cloud environment increases administrative overhead and the likelihood of password mismatches or synchronization issues. It also complicates revocation and auditing of user access.
- D. Incorrect.
Incorrect: Disabling MFA undermines security and introduces risks such as compromised accounts. Proper multi-cloud strategies emphasize strong authentication and identity safeguards rather than removing them.