You are asked to investigate a potential security risk on your company Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking through the audit logs for suspicious activity. How can you retrieve the audit logs using the OCI Command Line Interface (CLI)? (Choose the best answer.)

• A. oci audit event list --start-time $start-time -end-time $end-time -compartment-id $com-partment-id
• B. oci audit event list --start-time $start-time -end-time $end time -tenancy-id $tenancy id
• C. oci audit event list --start-time $start-time -compartment-id $compartment-id
• D. oci audit event list --end-time $end-time -compartment-id $compartment-id

You created an Oracle Linux compute instance through the Oracle Cloud Infrastructure (OCI) management console then immediately realize you forgot to add an SSH key file. You notice that OCI compute service provides instance console connections that supports adding SSH keys for a running instance. Hence, you created the console connection for your Linux server and activated it using the connection string provided.
However, now you get prompted for a username and password to login. What option should you recommend to add the SSH key to your running instance, while minimizing the administrative overhead? (Choose the best answer.)

• A. You need to terminate the running instance and recreate it by providing the SSH key file.
• B. You need to configure the boot loader to use ttyS0 as a console terminal on the VM.
• C. You need to modify the serial console connection string to include the identity file flag, to specify the SSH key to use.
• D. You need to reboot the instance from the console, boot into the bash shell in maintenance mode, and add SSH keys for the OPC user.

All the developers in a DevOps team are using the same compartment called 'devops'. There are two IAM groups: 'group-devs' and 'group-ops'. Which of the following IAM policy will give users in both these groups access to manage all resources in the compartment?

• A. Allow group group-dev, group-ops to manage all resources in compartment devops.
• B. Allow any-user to manage all resources in compartment devops where any
  {re-quest.group=group-dev,group-ops}.
• C. Allow any-user to manage all resources in compartment devops where request.group= /group*/.
• D. Allow group /group*/ to manage all resources in compartment devops.

Several development teams in your company have each been provided with a budget anda dedicated compartment to be used for testing purpose u are asked to help them to control the costs and avoid any overspending. What should you do?

• A. Configure a Quota for each compartment to prevent provisioning of any bare metal in-stances.
• B. Associate a Budget Tag to each resource with monthly budget amount and use that In-formation to prepare a weekly report to send to each team.
• C. Contact Oracle support and ask them to associate the monthly budget with the Service LimitsIn every region for which your tenancy is subscribed. The tenancy administrator will receive an alert email from Oracle when the limit Is reached.
• D. Associate a Budget Tag to each compartment with the monthly budget amount and set an alert rule to notify the developers' teams when they reached a specific percentage of the budget.

You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:

• A. Create an NSG, add a stateful rule to allow ingress access on port 443, and associate it with the public subnet that hosts the company website.
• B. Create a Network Security Group (NSG), add a stateful rule to allow ingress access on port 443, and associate it with the instance that hosts the company website.
• C. You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet. Which action would you take to accomplish the task? (Choose the best answer.)
• D. In the default security list, add a stateful rule to allow ingress access on port 443.Create a new security list with a stateful rule to allow ingress access on port 443 and associate it with the public subnet.