1z0-1085-23 Exam Dumps - Oracle Cloud Infrastructure 2023 Foundations Associate

When you work with Oracle Cloud Infrastructure, one of the first steps is to set up a virtual cloud network (VCN) for your cloud resources.

VIRTUAL CLOUD NETWORK (VCN) :

A virtual, private network that you set up in Oracle data centers. It closely resembles a traditional network, with firewall rules and specific types of communication gateways that you can choose to use. A VCN resides in a single Oracle Cloud Infrastructure region and covers a single, contiguous IPv4 CIDR block of your choice. See Allowed VCN Size and Address Ranges. The terms virtual cloud network, VCN, and cloud network are used interchangeably in this documentation. For more information, see VCNs and Subnets.

SUBNETS :

Subdivisions you define in a VCN (for example, 10.0.0.0/24 and 10.0.1.0/24). Subnets contain virtual network interface cards (VNICs), which attach to instances. Each subnet consists of a contiguous range of IP addresses that do not overlap with other subnets in the VCN. You can designate a subnet to exist either in a single availability domainavailability domain

or across an entire region (regional subnets are recommended). Subnets act as a unit of configuration within the VCN: All VNICs in a given subnet use the same route table, security lists, and DHCP options (see the definitions that follow). You can designate a subnet as either public or private when you create it. Private means VNICs in the subnet can't have public IP addresses. Public means VNICs in the subnet can have public IP addresses at your discretion. See Access to the Internet.

Live migration is the feature in the Oracle Cloud Infrastructure Compute service that enables users to migrate running instances between different physical servers. Live migration allows users to move instances without interrupting their workloads or affecting their availability.

Compartments do not provide a way to store and manage encryption keys and secrets in Oracle Cloud Infrastructure. Compartments are logical containers that help users organize and isolate their cloud resources. Compartments can be nested to create a hierarchy that reflects the structure of an organization or project. To store and manage encryption keys and secrets, users can use the Oracle Cloud Infrastructure Vault service, which is a fully managed service that provides centralized management of encryption keys, secrets, and certificates.

Object Lifecycle Management is the OCI Object Storage feature that can be used for the purpose of deleting any previous object versions 120 days after the object version transitions from the latest version to a previous version. Object Lifecycle Management allows you to create rules to automatically manage the deletion or archival of objects in a bucket based on predefined criteria, such as time, size, or name. You can use Object Lifecycle Management to reduce your storage costs and optimize your data management3

To achieve the desired outcome, you can create an Object Lifecycle Management rule that applies to all previous object versions in a bucket and specifies an age-based time rule that deletes objects 120 days after they become noncurrent versions. This rule will automatically delete any previous object versions that are older than 120 days from the date they were replaced by newer versions4

The other features are not suitable for this purpose. Pre-Authenticated Requests are a way to grant temporary access to your Object Storage resources without requiring users to have an Oracle Cloud Infrastructure identity. Pre-Authenticated Requests allow you to create URLs that can be used to access buckets or objects for a limited time period5 Retention Rules are a way to prevent objects from being deleted or overwritten for a specified period of time. Retention Rules allow you to create policies that enforce minimum retention durations for objects in a bucket or with specific prefixes. Retention Rules help you comply with regulatory or business requirements for data preservation6 Multipart Uploads are a way to upload large objects in parts rather than as a single operation. Multipart Uploads allow you to resume uploads, improve performance, and increase reliability for uploading large objects. Multipart Uploads help you overcome network or service disruptions during uploads7

The Ultra High Performance level is the only OCI Block Volume performance level that can meet the requirement of at least 105 IOPS/GB and 100,000 IOPS per volume. The Ultra High Performance level is recommended for workloads with the highest I/O requirements, requiring the best possible performance. With this option, you can purchase between 30 – 120 VPUs (volume performance units) per GB/month. The VPUs determine the baseline performance of the volume, as well as the maximum burst performance. The Ultra High Performance level offers the following performance characteristics: 1

• Baseline IOPS/GB: 75
• Maximum IOPS/GB: 300
• Maximum IOPS per volume: 480,000
• Baseline throughput/GB: 0.6 MB/s
• Maximum throughput/GB: 2.4 MB/s
• Maximum throughput per volume: 3,680 MB/s

To achieve the requirement of at least 105 IOPS/GB, you need to purchase at least 45 VPUs/GB. To achieve the requirement of 100,000 IOPS per volume, you need to have a volume size of at least 334 GB. Therefore, the Ultra High Performance level can satisfy both requirements with a minimum volume size of 334 GB and a minimum VPUs/GB of 45.

The other performance levels (Balanced, Higher Performance, and Lower Cost) cannot meet the requirement of at least 105 IOPS/GB and 100,000 IOPS per volume. The Balanced level offers 10 VPUs/GB, with a baseline of 60 IOPS/GB and a maximum of 75 IOPS/GB. The Higher Performance level offers 20 VPUs/GB, with a baseline of 75 IOPS/GB and a maximum of 150 IOPS/GB. The Lower Cost level offers 2 VPUs/GB, with a baseline of 2 IOPS/GB and a maximum of 10 IOPS/GB. None of these levels can provide the required performance for the workload1

https://docs.oracle.com/en/solutions/deploy-ebusiness-suite-oci/index.html#GUID-0CA881FD-D96F-4885-BC77-62E3A66EFF95

https://www.oracle.com/cloud/what-is-iaas/

What Is IaaS?

Infrastructure as a service (IaaS) is a type of cloud service model in which computing resources are hosted in the cloud. Businesses can use the IaaS model to shift some or all of their use of on-premises or colocated data center infrastructure to the cloud, where it is owned and managed by a cloud provider. These infrastructure elements can include compute, network, and storage hardware as well as other components and software.

In the IaaS model, the cloud provider owns and operates the hardware and software and also owns or leases the data center. When you have an IaaS solution, you rent the resources like compute or storage, provision them when needed, and pay for the resources your organization consumes. For some resources such as compute, you’ll pay for the resources you use. For others such as storage, you’ll pay for capacity.

How Does IaaS Work?

In a typical IaaS model, a business—which can be of any size—consumes services like compute, storage, and databases from a cloud provider. The cloud provider offers those services by hosting hardware and software in the cloud. The business will no longer need to purchase and manage its own equipment, or space to host the equipment, and the cost will shift to a pay-as-you-go model. When the business needs less, it pays for less. And when it grows, it can provision additional computing resources and other technologies in minutes.

In contrast, in a traditional on-premises scenario, a business manages and maintains its own data center. The business must invest in servers, storage, software, and other technologies, and hire an IT staff or contractors to purchase, manage, and upgrade all the equipment and licenses. The data center has to be built to meet peak demand, even though sometimes workloads decline and those resources stand idle. Conversely, if the business grows quickly, the IT department might struggle to keep up.

The primary use case for using Web Application Firewall (WAF) in OCI is to filter malicious web traffic and protect internet-facing and internal applications from attacks. WAF is a cloud-based, PCI-compliant, global web application firewall service that monitors and controls access to web applications based on predefined rules and threat intelligence. WAF can block common web application attacks such as cross-site scripting (XSS), SQL injection, remote file inclusion, etc., as well as bot traffic, geographic restrictions, rate limiting, etc. WAF can protect any internet-facing endpoint or internal application by attaching WAF policies to enforcement points such as load balancers or web application domain names10

Setting up your application across multiple fault domains is a way to configure high availability for an application in an OCI region with a single availability domain. A fault domain is a logical grouping of hardware and infrastructure within an availability domain that is designed to be isolated from failures in other fault domains. Fault domains let you distribute your instances so that they are not on the same physical hardware within a single availability domain. This reduces the impact of hardware failures, power outages, or network issues on your application availability and performance. Each availability domain has three fault domains, regardless of the number of availability domains in a region1

https://docs.oracle.com/en/cloud/paas/atp-cloud/index.html

Oracle Data Safe is a unified control center for your Oracle databases which helps you understand the sensitivity of your data, evaluate risks to data, mask sensitive data, implement and monitor security controls, assess user security, monitor user activity, and address data security compliance requirements.

Whether you’re using an Autonomous Database or an Oracle DB system, Oracle Data Safe delivers essential data security capabilities as a service on Oracle Cloud Infrastructure.

In Oracle Cloud Infrastructure, you can set up email alerts to receive notifications when budget thresholds are reached. Email alerts are sent to users who are subscribed to a budget alert rule, which specifies the percentage or amount of budget consumption that triggers the alert. Email alerts help users monitor and control their cloud spending.

Oracle Functions is a fully managed, multi-tenant, highly scalable, on-demand, Functions-as-a-Service platform. It is built on enterprise-grade Oracle Cloud Infrastructure and powered by the Fn Project open source engine. Use Oracle Functions (sometimes abbreviated to just Functions) when you want to focus on writing code to meet business needs.

The serverless and elastic architecture of Oracle Functions means there's no infrastructure administration or software administration for you to perform. You don't provision or maintain compute instances, and operating system software patches and upgrades are applied automatically. Oracle Functions simply ensures your app is highly-available, scalable, secure, and monitored. With Oracle Functions, you can write code in Java, Python, Node, Go, and Ruby (and for advanced use cases, bring your own Dockerfile, and Graal VM). You can then deploy your code, call it directly or trigger it in response to events, and get billed only for the resources consumed during the execution.

Here is the official list of all industry standards that OCI complies with : https://www.oracle.com/in/cloud/cloud-infrastructure-compliance/

There are two types of DB systems on virtual machines:

· A 1-node virtual machine DB system consists of one virtual machine.

· A 2-node virtual machine DB system consists of two virtual machines. (RAC)

A virtual machine DB system database uses Oracle Cloud Infrastructure block storage instead of local storage. You specify a storage size when you launch the DB system, and you can scale up the storage as needed at any time.

For 1-node virtual machine DB systems, Oracle Cloud Infrastructure provides have a "fast provisioning" option that allows you to create your DB system using Logical Volume Manager as your storage management software.

Oracle Cloud Infrastructure offers single-node DB systems on either bare metal or virtual machines, and 2-node RAC DB systems on virtual machines. If you need to provision a DB system for development or testing purposes, then a special fast provisioning single-node virtual machine system is available.

You can manage these systems by using the Console, the API, the Oracle Cloud Infrastructure CLI, the Database CLI (DBCLI), Enterprise Manager, Enterprise Manager Express, or SQL Developer.

Budgets and Compartment Quotas are two features that can be used to manage cost in an OCI tenancy. Budgets allow you to track and control your spending on OCI services by setting spending thresholds and getting alerts when you exceed them. Compartment Quotas allow you to limit the amount of resources that can be created or used in a compartment by setting quotas on specific resource types or metrics.

An availability domain is a part of a region. A region is a localized geographic area composed of one or more availability domains. An availability domain is one or more data centers located within a region that have fault-tolerant power and network connectivity. Availability domains are isolated from each other within a region, which provides protection from failures that affect multiple data centers at once.

A shape is a template that determines the number of CPUs, amount of memory, and other resources that are allocated to an instance.

The network bandwidth is directly proportional to the number of OCPUs in the instance shape!

Explanation

Oracle Cloud Infrastructure File Storage service provides a durable, scalable, secure, enterprise-grade network file system. You can connect to a File Storage service file system from any bare metal, virtual machine, or container instance in your Virtual Cloud Network (VCN). You can also access a file system from outside the VCN using Oracle Cloud Infrastructure FastConnect and Internet Protocol security (IPSec) virtual private network (VPN).

Large Compute clusters of thousands of instances can use the File Storage service for high-performance shared storage. Storage provisioning is fully managed and automatic as your use scales from a single byte to exabytes without upfront provisioning.

The File Storage service supports the Network File System version 3.0 (NFSv3) protocol. The service supports the Network Lock Manager (NLM) protocol for file locking functionality.

Oracle Cloud Infrastructure File Storage employs 5-way replicated storage, located in different fault domains, to provide redundancy for resilient data protection. Data is protected with erasure encoding.

The File Storage service uses the "eventual overwrite" method of data eradication. Files are created in the file system with a unique encryption key. When you delete a single file, its associated encryption key is eradicated, making the file inaccessible. When you delete an entire file system, the file system is marked as inaccessible. The service systematically traverses deleted files and file systems, frees all the used space, and eradicates all residual files.

Use the File Storage service when your application or workload includes big data and analytics, media processing, or content management, and you require Portable Operating System Interface (POSIX)-compliant file system access semantics and concurrently accessible storage. The File Storage service is designed to meet the needs of applications and users that need an enterprise file system across a wide range of use cases, including the following:

OCI logs are encrypted in three ways: in-flight, disk-level, and archive. OCI logs are encrypted in-flight, that is, while they are in the process of being ingested into OCI Logging; after the logs are in the system, they are encrypted with disk-level encryption for commercial environments; and logs are also encrypted when they are archived, and while in storage

Oracle Database Service for Azure is not designed for a multicloud solution. It is a service that allows customers to run Oracle Database on Azure infrastructure, using the same license they have for Oracle Database on Oracle Cloud Infrastructure3

Round robin is a type of load balancing policy supported by Oracle Cloud Infrastructure Load Balancer. Round robin distributes incoming traffic evenly across all healthy backend servers in a backend set. Round robin ensures that each server receives an equal number of requests over time.

You can create and manage resources in the following ways:

Oracle Cloud Infrastructure ConsoleThe Console is an intuitive, graphical interface that lets you create and manage your instances, cloud networks, and storage volumes, as well as your users and permissions. See Using the Console.

Oracle Cloud Infrastructure APIsThe Oracle Cloud Infrastructure APIs are typical REST APIs that use HTTPS requests and responses. See API Requests.

SDKsSeveral Software Development Kits are available for easy integration with the Oracle Cloud Infrastructure APIs, including SDKs for Java, Ruby, and Python. For more information, see Developer Resources.

Command Line Interface (CLI)You can use a command line interface with some services. For more information, see Developer Resources.

TerraformOracle supports Terraform. Terraform is "infrastructure-as-code" software that allows you to define your infrastructure resources in files that you can persist, version, and share. For more information, see Getting Started with the Terraform Provider.

AnsibleOracle supports the use of Ansible for cloud infrastructure provisioning, orchestration, and configuration management. Ansible allows you to automate configuring and provisioning your cloud infrastructure, deploying and updating software assets, and orchestrating your complex operational processes. For more information, see Getting Started with Ansible for Oracle Cloud Infrastructure.

Resource ManagerResource Manager is an Oracle Cloud Infrastructure service that allows you to automate the process of provisioning your Oracle Cloud Infrastructure resources. It helps you install, configure, and manage resources using the "infrastructure-as-code" model. For more information, see Overview of Resource Manager.

Storing and managing encryption keys and secrets is not a feature provided by Oracle Cloud Infrastructure Security Zones. Security Zones are compartments that enforce strict security policies on resources created within them. Security Zones help you prevent misconfigurations that could weaken your security posture or violate compliance requirements. Security Zones automatically apply predefined recipes of security policies based on best practices6. To store and manage encryption keys and secrets, you need to use Vault5.

Oracle Dedicated Region Cloud @Customer is a fully managed cloud region that brings all Oracle Cloud Infrastructure services and Oracle Fusion Cloud Applications, including Oracle Autonomous Database and SaaS applications, to customer datacenters, starting from only $500K a month1

https://education.oracle.com/en/learning-paths/trackp_OCIF2023CA

Oracle Autonomous Database on Shared Exadata Infrastructure is optimized for transaction processing, data warehousing, and mixed workloads. It is not optimized for high-performance computing, which typically requires specialized hardware and software4

The cost of running a virtual machine instance in Oracle Cloud Infrastructure depends on several factors, such as the size, shape, region, and operating system of the instance. The number of virtual machines running does not impact the cost of each individual instance1

Changing the Shape of an Instance (Horizontal Scaling)

You can change the shape of a virtual machine (VM) instance without having to rebuild your instances or redeploy your applications. This lets you scale up your Compute resources for increased performance, or scale down to reduce cost.

Autoscaling (vertical scaling)

Autoscaling lets you automatically adjust the number of Compute instances in an instance pool based on performance metrics such as CPU utilization. This helps you provide consistent performance for your end users during periods of high demand, and helps you reduce your costs during periods of low demand.

As load increases, instances are automatically provisioned: the instance pool scales out. As load decreases, instances are automatically removed: the instance pool scales in.

https://docs.cloud.oracle.com/en-us/iaas/Content/Compute/Tasks/resizinginstances.htm

An instance configuration is the term used to describe the combination of an instance’s shape, base image, and metadata in the Oracle Cloud Infrastructure Compute service. An instance configuration defines the hardware and software specifications for launching an instance.

In OCI a budget can be used to set soft limits on your Oracle Cloud Infrastructure spending. You can set alerts on your budget to let you know when you might exceed your budget, and you can view all of your budgets and spending from one single place in the Oracle Cloud Infrastructure console.

Budgets are set on

· Cost-tracking tags

· Compartments (including the root compartment)

https://www.oracle.com/assets/paas-iaas-pub-cld-srvs-pillar-4021422.pdf

Enterprises demand more than just availability from their cloud infrastructure. Mission-critical workloads also require consistent performance, and the ability to manage, monitor, and modify resources running in the cloud at any time. Only Oracle offers end-to-end SLAs covering performance, availability, manageability of services.

The Accelerated Data Science (ADS) SDK is an Oracle-developed Python library that makes common data science tasks faster, easier, and less error prone. The ADS SDK provides tools for data ingestion, exploration, transformation, visualization, modeling, evaluation, interpretation, and deployment. The ADS SDK also integrates with other popular Python libraries such as pandas, scikit-learn, TensorFlow, PyTorch, etc.

The ADS SDK is included as part of the Data Science service at no additional cost. The Data Science service is a fully managed platform that enables data scientists to build, train, deploy, and manage machine learning models on OCI. The Data Science service provides access to notebook sessions that come pre-installed with the ADS SDK and other essential Python packages for data science workflows.

Low performance is not a performance level available in the Oracle Cloud Infrastructure Block Volume service. The Block Volume service offers four performance levels for block volumes: higher performance, balanced, lower cost, and ultra high performance. Each performance level has different characteristics in terms of throughput, IOPS, latency, and cost.

Oracle Cloud Infrastructure is a set of complementary cloud services that enable you to build and run a wide range of applications and services in a highly available hosted environment. Oracle Cloud Infrastructure offers high-performance compute capabilities (as physical hardware instances) and storage capacity in a flexible overlay virtual network that is securely accessible from your on-premises network.

Network Security Groups (NSGs) and Security Lists (SLs) are two virtual firewall features that can be used for controlling traffic in an OCI Virtual Cloud Network (VCN). NSGs and SLs allow you to create stateful network filtering rules that allow or deny network traffic based on source and destination IP addresses, ports, and protocols5

NSGs are a subsequent feature designed for application components that have different security postures. NSGs are a set of security rules that you can apply to a set of VNICs in a VCN. NSGs are associated with VNICs, not subnets. You can use NSGs to implement a network security policy at the level of individual VNICs or a group of VNICs. For example, you can use NSGs to control traffic between tiers of an application deployed in a VCN5

SLs are the original virtual firewall feature from the Networking service. SLs are a set of security rules that you apply to a subnet in a VCN. SLs are associated with subnets, not VNICs. You can use SLs to implement a network security policy at the level of the subnet. For example, you can use SLs to control traffic between subnets in a VCN5

Oracle Functions is a fully managed, multi-tenant, highly scalable, on-demand, Functions-as-a-Service platform. It is built on enterprise-grade Oracle Cloud Infrastructure and powered by the Fn Project open source engine. Use Oracle Functions (sometimes abbreviated to just Functions) when you want to focus on writing code to meet business needs.

The serverless and elastic architecture of Oracle Functions means there's no infrastructure administration or software administration for you to perform. You don't provision or maintain compute instances, and operating system software patches and upgrades are applied automatically. Oracle Functions simply ensures your app is highly-available, scalable, secure, and monitored. With Oracle Functions, you can write code in Java, Python, Node, Go, and Ruby (and for advanced use cases, bring your own Dockerfile, and Graal VM). You can then deploy your code, call it directly or trigger it in response to events, and get billed only for the resources consumed during the execution.

Oracle Functions is based on Fn Project. Fn Project is an open source, container native, serverless platform that can be run anywhere - any cloud or on-premises. Fn Project is easy to use, extensible, and performant. You can download and install the open source distribution of Fn Project, develop and test a function locally, and then use the same tooling to deploy that function to Oracle Functions.

You can access Oracle Functions using the Console, a CLI, and a REST API. You can invoke the functions you deploy to Oracle Functions using the CLI or by making signed HTTP requests.

Creating a manual cluster of compute instances, and Writing custom scripts that will monitor your solution are not valid ways to ensure fault tolerance at all. Also, Performing Data Integrity check when using OCI File Storage Service is not valid since OCI takes care of it.

Therefore, we are left with:

1) Using multiple OCI Availibility Domains (AD), where available, to deploy your solution - Which is excellent because we have multiple AD's so that if one fails, we have a backup AD!

2) Ensuring your solution components are distributed across OCI Fault Domains - So that we can protect our deployment against unexpected power failures, AD failure etc.

A fault domain is a grouping of hardware and infrastructure within an availability domain. Each availability domain contains three fault domains. Fault domains provide anti-affinity: they let you distribute your instances so that the instances are not on the same physical hardware within a single availability domain. A hardware failure or Compute hardware maintenance event that affects one fault domain does not affect instances in other fault domains. In addition, the physical hardware in a fault domain has independent and redundant power supplies, which prevents a failure in the power supply hardware within one fault domain from affecting other fault domains.

Usually fault domains to do the following things:

1) Protect against unexpected hardware failures or power supply failures.

2) Protect against planned outages because of Compute hardware maintenance.

Nano instance is not a type of instance offered by the Oracle Cloud Infrastructure Compute service. The types of instances offered by the Compute service are bare metal, virtual machine, dedicated virtual machine host, and flexible virtual machine host. A nano instance is a type of instance offered by AWS EC2 service that provides a small amount of consistent CPU resources and allows users to increase CPU capacity in short bursts when additional cycles are available.

Oracle Cloud Infrastructure Key Management is a managed service that enables you to encrypt your data using keys that you control.

COMPARTMENT A collection of related resources. Compartments are a fundamental component of Oracle Cloud Infrastructure for organizing and isolating your cloud resources. You use them to clearly separate resources for the purposes of measuring usage and billing, access (through the use of policies), and isolation (separating the resources for one project or business unit from another). A common approach is to create a compartment for each major part of your organization.

· User Group can use some resources in the compartment like network resources also they can't create it depend on the policy that assigned

· Remember, a compartment is a logical grouping, not a physical one

Oracle Cloud Infrastructure Autonomous Database supports two workload types: transaction processing and data warehousing. Transaction processing workloads are optimized for high-performance online transaction processing (OLTP), mixed transactions and analytics processing (HTAP), and JSON document processing. Data warehousing workloads are optimized for high-performance analytics and reporting6

You can think of a Dynamic Routing Gateway (DRG) as a virtual router that provides a path for private traffic (that is, traffic that uses private IPv4 addresses) between your VCN and networks outside the VCN's region.

For example, if you use an IPSec VPN or Oracle Cloud Infrastructure FastConnect (or both) to connect your on-premises network to your VCN, that private IPv4 address traffic goes through a DRG that you create and attach to your VCN. For scenarios for using a DRG to connect a VCN to your on-premises network, see Networking Scenarios. For important details about routing to your on-premises network, see Routing Details for Connections to Your On-Premises Network.

Also, if you decide to peer your VCN with a VCN in another region, your VCN's DRG routes traffic to the other VCN over a private backbone that connects the regions (without traffic traversing the internet). For information about connecting VCNs in different regions, see Remote VCN Peering (Across Regions).

A NAT gateway gives cloud resources without public IP addresses access to the internet without exposing those resources to incoming internet connections.

Oracle Data Safe is a unified control center for your Oracle databases which helps you understand the sensitivity of your data, evaluate risks to data, mask sensitive data, implement and monitor security controls, assess user security, monitor user activity, and address data security compliance requirements.

Whether you’re using an Autonomous Database or an Oracle DB system, Oracle Data Safe delivers essential data security capabilities as a service on Oracle Cloud Infrastructure.

Features of Oracle Data Safe:

Oracle Data Safe provides the following set of features for protecting sensitive and regulated data in Oracle Cloud databases, all in a single, easy-to-use management console:

1) Security Assessment helps you assess the security of your cloud database configurations. It analyzes database configurations, user accounts, and security controls, and then reports the findings with recommendations for remediation activities that follow best practices to reduce or mitigate risk.

2) User Assessment helps you assess the security of your database users and identify high risk users. It reviews information about your users in the data dictionary on your target databases, and calculates a risk score for each user. For example, it evaluates the user types, how users are authenticated, the password policies assigned to each user, and how long it has been since each user has changed their password. It also provides a direct link to audit records related to each user. With this information, you can then deploy appropriate security controls and policies.

3) Data Discovery helps you find sensitive data in your cloud databases. You tell Data Discovery what kind of sensitive data to search for, and it inspects the actual data in your database and its data dictionary, and then returns to you a list of sensitive columns. By default, Data Discovery can search for a wide variety of sensitive data pertaining to identification, biographic, IT, financial, healthcare, employment, and academic information.

4) Data Masking provides a way for you to mask sensitive data so that the data is safe for non-production purposes. For example, organizations often need to create copies of their production data to support development and test activities. Simply copying the production data exposes sensitive data to new users. To avoid a security risk, you can use Data Masking to replace the sensitive data with realistic, but fictitious data.

5) Activity Auditing lets you audit user activity on your databases so you can monitor database usage and be alerted of unusual database activities.

• A compartment is a logical container that can hold OCI resources such as compute instances, block volumes, virtual cloud networks, etc. Compartments help you organize and control access to your resources based on business needs or security requirements3
• By default, your tenancy comes with a root compartment that is the parent of all other compartments in your tenancy. You cannot delete the root compartment, but you can create subcompartments within it to further organize your resources3
• Compartments can be used to logically separate OCI resources, not physically separate them. Resources within one compartment can interact with resources in other compartments, as long as the appropriate policies and network configurations are in place. For example, you can attach a compute instance in one compartment to a virtual cloud network in another compartment, or grant access to a user group in one compartment to manage resources in another compartment34