nerdexam
Oracle

1Z0-997-20 · Question #74

Your team is conducting a root analysis (RCA) following a recent, unplanned outage. One of the block volumes attached to your production WebLogic server was deleted and you have tasked with…

The correct answer is C. principalld. The Oracle Cloud Infrastructure Audit service automatically records calls to all supported Oracle Cloud Infrastructure public application programming interface (API) endpoints as log events. Currently, all services support logging by Audit.

Design for Security

Question

Your team is conducting a root analysis (RCA) following a recent, unplanned outage. One of the block volumes attached to your production WebLogic server was deleted and you have tasked with identifying the source of the action. You search the Audit logs and find several Delete actions that occurred in the previous 24 hours. Given the sample of this event. Which item from the event log helps you identify the individual or service that initiated the DeleteVolume API call?

Exhibit

1Z0-997-20 question #74 exhibit

Options

  • ArequestAgent
  • Beventource
  • Cprincipalld
  • DrequestOrigin
  • EeventId

How the community answered

(60 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    80% (48)
  • D
    7% (4)
  • E
    10% (6)

Explanation

The Oracle Cloud Infrastructure Audit service automatically records calls to all supported Oracle Cloud Infrastructure public application programming interface (API) endpoints as log events. Currently, all services support logging by Audit.

Topics

#Audit Logs#principalId#API event forensics#block volume

Community Discussion

No community discussion yet for this question.

Full 1Z0-997-20 Practice