Skill Check: Identity and Access Management - Basics

1. A company wants to grant a user the ability to create and manage applications within an OCI IAM identity domain, but restrict access to user accounts and security settings.

Which predefined administrator role would be MOST appropriate?

• User Administrator

• Application Administrator

• Security Administrator

• Help Desk Administrator

Answer explanation

Explanation: The Application Administrator role grants permissions to create, update, activate, deactivate, and delete applications. It also allows assigning or revoking access for groups and users to specific applications. This aligns perfectly with the company's requirement of managing applications without access to user accounts or security settings.

2. How many levels deep can compartments be nested within OCI?

• Unlimited levels

• Two levels

• Nesting is not supported in OCI.

• Six levels

Answer explanation

Explanation: OCI compartments offer a flexible structure by allowing you to nest them up to six levels deep.

3. By default, which group in the OCI default domain has full access to all OCI Cloud resources?

• Default User Group

• Domain Administrator Group

• Security Administrator Group

• Administrator Group

Answer explanation

Explanation: The Administrator Group within the default domain is a predefined group with full access to all OCI Cloud resources by default. This group ensures initial administrative control over your tenancy.

4. OCI compartment quotas has three quota policy statements: Set, Unset, and Zero.

Which statement removes all access to a specific resource type within a compartment?

• Set

• Unset

• All statements have the same effect.

• Zero

Answer explanation

Explanation: The Zero statement is used to completely remove access to a specific resource type within a compartment.

5. In OCI IAM policies, verbs such as "inspect," "read," "use," and "manage" are used to:

• Identify the specific resource type being accessed

• Define the level of permission granted on resources

• Control the location or compartment where the policy applies

• Assign a unique identifier for the policy

Answer explanation

Explanation: Verbs determine the level of access granted to users or groups on specific resources. The hierarchy goes from "inspect" (lowest permission) to "manage" (highest permission), allowing granular control over resource interactions.