Cyber Monday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Oracle Exam 1Z0-1072-23 Topic 4 Question 20 Discussion

Actual exam question for Oracle's 1Z0-1072-23 exam
Question #: 20
Topic #: 4
[All 1Z0-1072-23 Questions]

You have three compartments: ProjectA, ProjectB, and ProjectC. For each compartment, there is an admin group set up: A-Admins, B-Admins, and C-Admins.

Each admin group has full access over their respective compartments as shown in the graphic below.

Your organization has set up a tag namespace, EmployeeGroup.Role and all your admin groups are tagged with a value of 'Admin'.

You want to set up a Test compartment for members of the three projects to share. You also need to provide admin access to all three of your existing admin groups.

Which policy would you write to accomplish this task?

Show Suggested Answer Hide Answer
Suggested Answer: D

Allow all-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin' is the policy that would accomplish this task. This policy grants admin access to all groups that have the tag EmployeeGroup.Role='Admin' in the compartment Test. The other options are not correct, as they use incorrect terms such as dynamic-group, any-group, or any-user. Reference: [Tag-Based Authorization]


Contribute your Thoughts:

Celia
7 months ago
Option B is the clear winner here. Using a dynamic group is the most efficient and scalable solution for managing the Test compartment's access.
upvoted 0 times
...
Yuette
7 months ago
I agree with Matthew. Option B is the way to go. Allows for easy management and scalability of the admin groups.
upvoted 0 times
Glory
5 months ago
I agree, option B allows for easy management and scalability.
upvoted 0 times
...
Felix
5 months ago
I think option B is the best choice.
upvoted 0 times
...
Vince
6 months ago
I agree, option B seems like the most efficient solution.
upvoted 0 times
...
Mireya
6 months ago
I think option B is the best choice.
upvoted 0 times
...
Glendora
6 months ago
I agree, Option B seems like the most efficient solution.
upvoted 0 times
...
Page
6 months ago
I think Option B is the best choice.
upvoted 0 times
...
...
Matthew
7 months ago
Option B is the correct answer. Using a dynamic group to manage the resources in the Test compartment is the best approach, as it allows for the flexibility to include any admin groups that have the 'Admin' tag.
upvoted 0 times
Milly
6 months ago
That makes sense. Using a dynamic group gives us the flexibility to include any admin groups with the 'Admin' tag.
upvoted 0 times
...
Julene
6 months ago
B) Allow dynamic-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'
upvoted 0 times
...
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77