What are the security recommendations and best practices for Oracle Functions?

• A.Grant privileges to UID and GID 1000, such that the functions running within a container acquire the default rootcapabilities.
• B.Add applications to network security groups for fine-grained ingress/egress rules.
• C.Define a policy statement that enables access to functions for requests coming from multiple IP addresses.
• D.Ensure that functions in a VCN have restricted access to resources and services.

Comment: *

Name: *

Email: *

Verification: *

Which parameters customers need to configure while reading secrets by name using CL1 or API? Select TWO correct answers.

• A.Certificates
• B.Secret Name
• C.ASCII Value
• D.Vault Id

Correct Answer: B,D

Comment: *

Name: *

Email: *

Verification: *

A http web server hosted on an Oracle cloud infrastructure compute instance in a public subnet of the vcsl virtual cloudnetwork has a stateless security ingress rule for port 80 access through internet gateway stateful network security group notification for port 80 how will the Oci vcn handle request response traffic to the compute instance for a web page from the http server with port 80?

• A.network security group would supersede the security utility list and allow both inbound and outbound traffic
• B.the union of both configuration would happen and allow both inbound and outbound traffic
• C.due to the conflict in security configuration inbound request traffic would not be allowed
• D.Because there is no Egress ruled defined in Security List, The Response would not pass through Internet Gateway.

Comment: *

Name: *

Email: *

Verification: *

You are using a custom application with third-party APIs to manage application and data hosted in an Oracle Cloud Infrastructure(OCI) tenancy. Although your third-party APIs don't support OCI's signature-based authentication, you want them to communicate with OCI resources. Which authentication option must you use to ensure this?

• A.OCI username and Password
• B.API Signing Key
• C.SSH Key Pair with 2048-bit algorithm
• D.Auth Token

Comment: *

Name: *

Email: *

Verification: *

You want to create a stateless rule for SSH in a security list, and the Ingress rule has al-ready been properly configured. Which combination should you use on the egress rule? (Choose the best Answer.)

• A.Select UDP for Protocol; enter 22 for Source Part; and ALL for Destination Port.
• B.Select TCP for Protocol; enter 22 for Source Port; and ALL for Destination Port.
• C.Select TCP for Protocol; enter 22 for Source Port; and 22 for Destination Port.
• D.Select TCP for Protocol enter ALL for Source Port; and 22 for Destination Port.

Comment: *

Name: *

Email: *

Verification: *