OCI Compartments and IAM Policies Quiz

1. In OCI, what happens when you delete a compartment with resources?

The compartment and all resources are automatically deleted

Only the compartment is deleted; resources remain

The compartment must be empty before deletion

Resources are moved to the parent compartment

2. Which of the following best describes least privilege access in OCI?

Granting all permissions to all users

Granting only the minimum permissions required for users to perform their tasks

Restricting access only to administrators

Removing all security policies from compartments

3. In OCI, what is a 'resource tag'?

A label applied to resources for organization and cost tracking

A security certificate for encrypted resources

A compartment name identifier

A network port configuration

4. What is the 'root' compartment in OCI?

The administrator's personal compartment

The top-level container that represents the entire tenancy

A compartment reserved for system resources only

A temporary compartment for testing

5. Can you grant permissions across compartments with a single IAM policy?

No, each compartment requires separate policies

Yes, if the policy is created at the root or parent compartment level

Only for read permissions

Only administrators can grant cross-compartment permissions

6. Which resource-type in IAM policy refers to database resources?

Database-family

Db-family

Database

Compute-database

7. What is an OCI 'dynamic group'?

A group that is manually managed by administrators

A group whose members are defined by rules based on resource attributes

A temporary group created for a single session

A group that only contains service principals

8. In OCI IAM, can policies be attached to individual users directly?

Yes, always

No, policies are attached only to groups or compartments

Only for root users

Only for service accounts

9. What does the 'inspect' permission level allow a user to do?

View resource metadata and details

Modify and delete resources

Create new resources

Transfer resources between compartments

10. Which policy statement allows members of 'Developers' group to create compute instances in the 'Engineering' compartment?

Allow group Developers to manage compute-family in compartment Engineering

Allow Developers to create instances

Grant Developers compute access

Enable Developers in Engineering

11. What is the primary purpose of compartments in Oracle Cloud Infrastructure?

To organize and isolate cloud resources for access control and billing

To store encrypted data only

To manage virtual machine instances

To configure network security groups

12. What is the purpose of a 'tenancy' in OCI?

To manage individual user accounts

To encrypt data in transit

The root container that holds all of a customer's cloud resources and compartments

To configure virtual networks only

13. Can a user belong to multiple groups in OCI?

No, each user can only belong to one group

Yes, users can belong to multiple groups

Only administrators can belong to multiple groups

Users and groups are separate and unrelated

14. Which of the following is a valid principal type in OCI IAM?

Database

Group

Network

Storage

15. What is the broadest permission level in OCI IAM?

Inspect

Read

Use

Manage

16. In IAM policy syntax, what does the 'verb' represent?

The action or permission (inspect, read, use, manage)

The user's name

The resource identifier

The compartment location

17. What is the correct syntax for an OCI IAM policy statement?

Allow to in

Grant access to

Permit for

Enable on

18. Which type of IAM policy statement grants permissions?

Allow statements only

Deny statements only

Both Allow and Deny statements

Compartment statements only

19. In OCI IAM, what does a 'principal' refer to?

A database connection string

An entity that can perform actions on resources (user, group, or service)

A network security rule

A storage bucket configuration

20. Which statement correctly describes compartment hierarchy in OCI?

Compartments cannot be nested under other compartments

Compartments can be nested, and child compartments inherit parent policies

Only the root compartment can contain resources

Compartments are strictly for billing purposes only

OCI Foundations Compartments and IAM Policies Quiz