PDF 1z0-1093-23 Study Guide

The correct IAM policy to use to allow a group called DatabaseAdmins to create Exadata Database Services is to allow the group to manage the database-family resource type in the tenancy. The database-family resource type includes all the resources related to Oracle Database services, such as DB systems, databases, backups, patches, and Exadata infrastructure1. The syntax for the policy statement is as follows2:

Allow group DatabaseAdmins to manage database-family in tenancy

This policy statement grants the DatabaseAdmins group the permission to perform any action on any resource in the database-family resource type within the tenancy. This includes creating, updating, deleting, and viewing Exadata Database Services and other database resources12.

The other options are not correct IAM policies to use for this purpose. Option A is not a valid syntax, as the tenancy cannot be used as a target for a policy statement. Option B is not a valid syntax, as the databases cannot be used as a principal for a policy statement. Option D is not sufficient, as it only grants the permission to create database-family resources, but not to manage them. Option E is not comprehensive, as it only grants the permission to manage databases, but not other database-family resources, such as Exadata infrastructure12. References:

• Resource Types - Oracle Help Center
• Policy Syntax - Oracle Help Center

A compartment is a logical container that can hold resources such as databases, compute instances, networks, etc. A compartment can be organized in a hierarchical fashion, with parent and child compartments1. After creating a compartment, you do not need to write any policies for it, unless you want to grant access to other users or groups2. Compartments are tenancy-wide, meaning that they are available across all the regions that the tenancy subscribes to3. A compartment allows you to isolate resources for different purposes, such as development, testing, production, etc. Therefore, statement C is false, and statements A, B, and D are true. References: 1: Become an Oracle Base Database Services Professional (2023), Section 2.1.1: Compartments 2: Base Database Service, Section 1.2.1: Compartments 3: Oracle Base Database Services 2023 Professional, Section 2.1.1: Compartments : [Oracle Cloud Infrastructure Documentation], Compartments and Subcompartments

A Routing Table is a set of rules that determine how traffic is routed within a VCN and to other networks. Each rule consists of a destination CIDR Block and a target, which can be a gateway, a private IP, or a service gateway1. A Routing Table controls only the egress (outbound) traffic from a subnet, not the ingress (inbound) traffic2. Therefore, statements B and F are true, and statements A, C, D, and E are false. References: 1: Oracle Base Database Services 2023 Professional, Section 3.3.2: Routing Tables 2: Base Database Service, Section 2.2.3: Routing Tables

To manage an external database using the Oracle Cloud Infrastructure Database Management Service, you must create or configure a database handle and a database connection1. A database handle is a resource that represents an external database in Oracle Cloud Infrastructure2. It contains information such as the database name, version, edition, and deployment type. A database connection is a resource that enables you to connect a database handle to an Oracle Database instance located outside of Oracle Cloud Infrastructure3. It contains information such as the host name, port number, service name, and credentials. You can create and manage database handles and connections using the Oracle Cloud Infrastructure Console or the REST API23.

A is incorrect, because a dynamic group is not required to manage an external database. A dynamic group is a group of Oracle Cloud Infrastructure resources that are dynamically matched according to rules that you define4. You can use a dynamic group to grant permissions to the Database Management agent, which is a software component that runs on the host where the external database is located and communicates with the Database Management service5. However, creating a dynamic group is not mandatory, as you can also use other methods to grant permissions to the agent, such as using a user API key or an instance principal5.

C is incorrect, because a database group is not required to manage an external database. A database group is a logical grouping of databases that you can use to perform actions on multiple databases at once. You can create a database group for external databases, but it is not a prerequisite for managing them.

References: 1: About Database Management 2: Manage the Handles for External Database 3: Manage the Connections for External Database 4: Managing Dynamic Groups 5: About Database Management Agent : Managing Database Groups