Course Description

Prepare to pass exam: Oracle Cloud Infrastructure 2024 Security Professional

Oracle Cloud Infrastructure 2024 Security Professional certification is a Hands-on Performance based exam comprising of hands-on challenges and multiple choice questions.

The Oracle Cloud Infrastructure Security certification is intended for professionals who are responsible for security in their Oracle Cloud Infrastructure environments. The target candidate should have 2+ years of experience in designing and implementing security solutions. Additionally, the candidate should have 6 months or more of hands-on experience in securing workloads on OCI.

The exam validates the following OCI Security topics:

• Working knowledge of OCI security services to provide a secure cloud environment
  
• Understanding of OCI Identity and Access Management service and features
  
• Understanding of OCI mechanisms to secure data and database workloads
  
• Understanding of network security in OCI
  
• Understanding of how to secure applications in OCI
  
• Understanding of security operations, including monitoring, logging, and alerting
  
• Familiarity with compliance frameworks
  

Up-to-date OCI training and hands-on experience are recommended. This certification is available to all candidates.

To prepare for the Oracle Cloud Infrastructure 2024 Security Professional exam, focus on understanding key security concepts, such as identity and access management, data protection, and security governance within Oracle Cloud. Gain hands-on experience with implementing security controls, monitoring security incidents, and managing security compliance. Utilize official study materials, practice exams, and training resources to reinforce your knowledge and skills. Familiarize yourself with best practices for securing cloud environments to ensure success on the exam and in real-world applications.

Exam topics covered

OCI Security Introduction

• Describe the OCI Shared Security Responsibility model
  
• Understand security design principles
• Use core security services to secure deployments on OCI

Implementing Identity and Access Management (IAM)

• Understand the core concepts of Identity and Access Management
  
• Create and manage IAM domains, users, groups, and compartments
• Implement IAM policies to control access to resources
• Configure Dynamic Groups, Network Sources, and Tag-based Access Control
• Configure and manage Multi-factor Authentication (MFA), sign-on polices, reports & alerts

Protecting Infrastructure - Network and Applications

• Implement Network Security Groups (NSGs), Security Lists, and Network Firewalls to enhance VCN security
  
• Ensure high availability with Load Balancers
• Manage and utilize OCI Certificates
• Create and configure a Web Application Firewall

Implementing OS and Workload Protection

• Analyze and implement time-limited access using OCI Bastion
  
• Implement vulnerability scanning for hosts and container images to ensure security
• Utilize OS management to manage and automate system updates

Protecting Data

• Secure data with OCI Key Management Service (KMS) by managing encryption keys
  
• Configure and manage secrets within the OCI Vault
• Explore the key functionalities of OCI Data Safe

Detecting, Remediating, and Monitoring OCI Resources

• Use Cloud Guard to monitor and analyze the security posture of the OCI resources and applications
  
• Implement Security Zones and Security Advisor
• Identify rogue users with Threat Intelligence
• Utilize OCI Monitoring to track OCI resource performance
• Implement OCI Logging & Events to ensure secure monitoring and alters