OCI Architect Security Architecture Quiz

1. OCI's Data Safe service primarily protects which type of data?

Object Storage buckets

Database data and sensitive information

Network traffic

API keys and tokens

2. In OCI, what does the Cloud Guard service primarily do?

Encrypts all data automatically

Detects and remediates security misconfigurations and threats

Manages SSL certificates

Blocks all external access

3. Which OCI compliance certification demonstrates adherence to data protection and security standards?

ISO 27001 and SOC 2 Type II

PCI DSS only

HIPAA only

FedRAMP only

4. True or False: OCI Identity Domains support both SAML and OIDC protocols for federated identity.

True

False

5. In OCI VCN design, what is the purpose of a private subnet with a NAT Gateway?

Allow inbound traffic from the internet

Allow outbound internet access without inbound exposure

Encrypt all traffic between subnets

Block all external communication

6. Which OCI service provides runtime security monitoring and threat detection for container workloads?

OCI Container Registry

OCI Cloud Guard

OCI Container Instances

OCI Runtime Security

7. True or False: OCI policies use AND logic when multiple conditions are specified in a single statement.

True

False

8. In OCI, what is the primary purpose of Security Zones?

Isolate databases from network traffic

Enforce consistent security policies across compartments

Encrypt all data in a region

Limit user access to specific availability domains

9. Which OCI feature allows you to audit and monitor all API calls made within your tenancy?

OCI Audit logs

OCI Monitoring

OCI Logging Service

OCI Cloud Guard

10. True or False: Internet Gateway in OCI allows all inbound traffic by default without security rules.

True

False

11. Which OCI service provides centralized identity management and authentication across your cloud infrastructure?

Oracle Identity Cloud Service (IDCS)

Oracle Database Security

OCI Vault

OCI WAF

12. Which authentication method in OCI provides temporary security credentials without storing passwords?

Multi-factor authentication (MFA)

API signing keys

Instance principals

OAuth 2.0 tokens

13. True or False: OCI Virtual Cloud Network (VCN) subnets can span multiple availability domains.

True

False

14. In OCI IAM, what does the principle of least privilege require?

Grant all permissions to administrators

Grant only the minimum permissions needed for users to perform their tasks

Deny all access by default

Use only service accounts for all operations

15. Which OCI service provides Web Application Firewall (WAF) protection against common web attacks?

OCI DDoS Protection

OCI WAF

OCI Network Firewall

OCI Security Advisor

16. True or False: OCI compartments can be nested up to 6 levels deep for hierarchical access control.

True

False

17. Which OCI service should you use to centrally manage encryption keys across your infrastructure?

OCI Vault

OCI Key Management

Oracle Database Vault

OCI Secrets Management

18. What is the correct order of IAM hierarchy in OCI from broadest to most specific?

Tenancy → Compartment → User → Group

Tenancy → Compartment → Policy → User

Tenancy → Region → Compartment → User

Region → Compartment → User → Group

19. In OCI, which encryption method protects data at rest in Object Storage by default?

Customer-managed keys only

Service-managed encryption keys (automatic)

Transparent Data Encryption (TDE)

No encryption unless explicitly enabled

20. What is the primary purpose of OCI Network Security Groups (NSGs)?

Manage database user permissions

Define stateful firewall rules at the subnet level

Encrypt data in transit

Monitor API gateway traffic

OCI Architect Professional Security Architecture Quiz

1. OCI's Data Safe service primarily protects which type of data?

2.

What first name or nickname would you like us to use?

2. In OCI, what does the Cloud Guard service primarily do?

3. Which OCI compliance certification demonstrates adherence to data protection and security standards?

4. True or False: OCI Identity Domains support both SAML and OIDC protocols for federated identity.

5. In OCI VCN design, what is the purpose of a private subnet with a NAT Gateway?

6. Which OCI service provides runtime security monitoring and threat detection for container workloads?

7. True or False: OCI policies use AND logic when multiple conditions are specified in a single statement.

8. In OCI, what is the primary purpose of Security Zones?

9. Which OCI feature allows you to audit and monitor all API calls made within your tenancy?

10. True or False: Internet Gateway in OCI allows all inbound traffic by default without security rules.

11. Which OCI service provides centralized identity management and authentication across your cloud infrastructure?

12. Which authentication method in OCI provides temporary security credentials without storing passwords?

13. True or False: OCI Virtual Cloud Network (VCN) subnets can span multiple availability domains.

14. In OCI IAM, what does the principle of least privilege require?

15. Which OCI service provides Web Application Firewall (WAF) protection against common web attacks?

16. True or False: OCI compartments can be nested up to 6 levels deep for hierarchical access control.

17. Which OCI service should you use to centrally manage encryption keys across your infrastructure?

18. What is the correct order of IAM hierarchy in OCI from broadest to most specific?

19. In OCI, which encryption method protects data at rest in Object Storage by default?

20. What is the primary purpose of OCI Network Security Groups (NSGs)?