1z0-1085-23 Exam Results

The primary purpose of a network security group (NSG) in the Oracle Cloud Infrastructure Networking service is to control traffic flow between specific resources within a VCN. An NSG is a set of virtual firewall rules that can be applied to one or more resources, such as instances, load balancers, or database nodes. NSGs allow users to define granular security policies for different types of resources within a VCN.

DATA ENCRYPTION

Protect customer data at-rest and in-transit in a way that allows customers to meet their security and compliance requirements for cryptographic algorithms and key management

The Oracle Cloud Infrastructure Block Volume service always encrypts all block volumes, boot volumes, and volume backups at rest by using the Advanced Encryption Standard (AES) algorithm with 256-bit encryption. By default all volumes and their backups are encrypted using the Oracle-provided encryption keys. Each time a volume is cloned or restored from a backup the volume is assigned a new unique encryption key.

The File Storage service encrypts all file system and snapshot data at rest. By default all file systems are encrypted using Oracle-managed encryption keys. You have the option to encrypt all of your file systems using the keys that you own and manage using the Vault service.

Object Storage employs 256-bit Advanced Encryption Standard (AES-256) to encrypt object data on the server. Each object is encrypted with its own data encryption key. Data encryption keys are always encrypted with a master encryption key that is assigned to the bucket. Encryption is enabled by default and cannot be turned off. By default, Oracle manages the master encryption key.

Network File System (NFS) is the file protocol that Oracle Cloud Infrastructure File Storage Service uses to enable file sharing across instances. NFS is a distributed file system protocol that allows a user on a client computer to access files over a network in a manner similar to how local storage is accessed. The File Storage service supports the NFS version 3.0 protocol with Network Lock Manager (NLM) for file locking functionality2.