You have been asked to investigate a potential security risk on your company's Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking through the audit logs for suspicious…

Question

Options

• Aoci audit event list --start-time $start-time --end-time $end-time --compartment-id $compartment-id
• Boci audit event list --start-time $start-time --end-time $end-time --tenancy-id $tenancy-id
• Coci audit event list --start-time $start-time --compartment-id $compartment-id
• Doci audit event list --end-time $end-time --compartment-id $compartment-id

• A
  83% (34)
• B
  2% (1)
• C
  10% (4)
• D
  5% (2)

Explanation

Retrieving Audit events In order to make use of audit events, the first step is to retrieve and store audit events. Let's take a look into the ways in which an Audit event can be retrieved: Oracle Cloud Infrastructure Web Console - With user credentials, customers can log in to the web console to access the Audit service. For example, when customers are trying the service for the first time; this helps with a first look into a handful of events. Oracle Cloud Infrastructure CLI [3] - With CLI customers can make use of the service to retrieve events for a defined compartment and for a region specified as per CLI's config. The CLI command would look #oci audit event list --start-time $start-time --end-time $end-time --compartment-id $compartment-id Oracle Cloud Infrastructure SDKs [4][5] - With SDKs customers can choose a supported language and retrieve Audit events with the ListEvents API [6]. For production use cases, this would be the best suitable option. https://blogs.oracle.com/cloud-infrastructure/operating-oracle-cloud-infrastructure-tenancies- retrieving-audit-log s

No community discussion yet for this question.