OCI Security Professional case studies
OCI Security Professional · Put your knowledge to work in context.
The Oracle Cloud Infrastructure 2023 Security Professional credential, tracked under exam code 1Z0-1104-23, is Oracle's professional-level certification for practitioners who design, implement, and operate security controls across OCI tenancies. It suits cloud security engineers, cloud architects, and administrators who already work hands-on with compartments, policies, VCNs, and Vault, and who want independent validation of that depth rather than an entry-level badge. The OCI Security Professional case studies are 5 cases and about 4,510 words.
1Root-Level Policy Sprawl After a Contractor Release
Northwind Logistics runs one OCI tenancy in eu-frankfurt-1 with eleven compartments, including Shared-Services, Net, Prod-App, Prod-Data, Stage, Dev and four team compartments. During a release freeze last quarter a contractor added this statement at the tenancy root: Allow group AppDevs to manage all-resources in tenancy.
896 words, about 4 min2Three-Tier VCN: NAT Charges, Stateful Rules and an Open SSH Port
Finbank's payments service runs in a VCN 10.20.0.0/16 in uk-london-1: a public subnet for the load balancer tier, a private subnet for application VMs, and a private subnet for an Autonomous Database. The database subnet's security list allows ingress TCP 1521 from 10.20.0.0/16 and egress to 0.0.0.0/0.
906 words, about 5 min3Vault Key Scheduled for Deletion Before a Departure
Helios Health keeps 6 TB of imaging studies in an Object Storage bucket in us-ashburn-1, encrypted with a customer-managed AES-256 HSM-protected key in an OCI Vault in the same region. Cross-region replication copies the bucket to us-phoenix-1 for disaster recovery.
897 words, about 4 min4SIEM Pipeline Gaps, Retention and a Silenced Cloud Guard Recipe
Metro Transit's SOC ingests OCI logs through a Service Connector Hub into a third-party SIEM. Sources are tenancy Audit logs, VCN Flow Logs for two subnets, and Object Storage read/write logs for a bucket holding fare data.
935 words, about 5 min5Leaked API Key Creates a Tenancy-Wide Policy at 09:12
At 09:12 on a Saturday an OCI Events rule notified the on-call engineer that a user named svc-reporting had created an IAM policy granting manage all-resources in tenancy to a group called tmp-ops. svc-reporting belongs to the Reporting group and holds an API signing key plus a Customer Secret Key used by an S3-compatible backup tool.
876 words, about 4 min