Oracle Cloud Infrastructure 2023 Architect Associate — Question 19

In which two ways can Oracle Security Zones assist with the cloud security shared responsibility model? (Choose two.)

Answer options

• A. Allow access to an unsecured compartment, which is moved from a standard compartment.
• B. Deny public access to Oracle Cloud Infrastructure resources, such as databases and object storage buckets.
• C. Add or move a standard compartment to a highly secured security zone compartment.
• D. Encrypt storage resources with a customer-managed key.

Correct answer: B, D

Explanation

Option B is correct because denying public access enhances the security of Oracle Cloud Infrastructure resources, aligning with the shared responsibility model. Option D is also correct since encrypting storage resources with a customer-managed key provides additional data protection. Options A and C do not contribute to enhancing the security model effectively; allowing access to unsecured compartments and merely moving compartments does not improve security.