Oracle Cloud Infrastructure 2021 Multicloud Architect Associate — Question 4

Security Testing Policy describes when and how you may conduct certain types of security testing of Oracle Cloud Services, including vulnerability and penetration tests, as well as tests involving data scraping tools.
What does Oracle allow as part of this testing? (Choose the best answer.)

Answer options

• A. Customers are allowed to use their own testing and monitoring tools.
• B. Customers can simulate DoS attack scenarios as long as it's restricted to the customer's own environment.
• C. Customers can validate that their network resources are isolated from other customer resources.
• D. Customers are allowed to test Oracle Cloud Infrastructure (OCI) hardware related to resources in their tenancy.

Correct answer: A

Explanation

The correct answer is A because the policy explicitly allows customers to use their own testing and monitoring tools to assess security. Options B, C, and D are incorrect as they either involve actions that could potentially disrupt service or do not align with the policy's stipulations regarding security testing.