Oracle Cloud Infrastructure 2020 Architect Associate — Question 51

Your customer is using an Oracle Cloud Infrastructure (OCI) compartment named Production that hosts several resources such as compute instances, DB
Systems and File Systems. Each resource in the Production compartment is tagged.
The customer's security team wants to restrict access to DB Systems to only the authorized group of DBAs.
Which OCI Tagging capability can be used to meet this requirement?

Answer options

• A. Tags Defaults with predefined values
• B. Tag Defaults
• C. Cost-Tracking Tags
• D. Tag-based Access Control

Correct answer: D

Explanation

Tag-based Access Control allows you to restrict access to resources based on their tags, which is essential for limiting access to DB Systems for only authorized DBAs. The other options, such as Tags Defaults and Cost-Tracking Tags, do not provide the necessary access control features needed to enforce such restrictions.