Your organization is planning on using Oracle Cloud Infrastructure (OCI) File Storage Service (FSS). You will be deploying multiple compute instance in Oracle Cloud Infrastructure (OCI) and mounting…

Question

Options

• AUse stateless Security List rule to restrict access from known IP addresses only.
• BCreate a new VCN security list, choose SOURCE TYPE as Service and SOURCE SERVICE as FSS. Add stateless ingress and egress rules for specific P
• CUse 'Export option' feature of FSS to restrict access to the mounted file systems.
• DCreate and configure OCI Web Application Firewall service with built in DNS based intelligent routing.

• A
  2% (1)
• B
  10% (4)
• C
  71% (30)
• D
  17% (7)

Explanation

Explanation/Reference: NFS export options enable you to create more granular access control than is possible using just security list rules to limit VCN access. You can use NFS export options to specify access levels for IP addresses or CIDR blocks connecting to file systems through exports in a mount target. Access can be restricted so that each client's file system is inaccessible and invisible to the other, providing better security controls in multi-tenant environments. Using NFS export option access controls, you can limit clients' ability to connect to the file system and view or write data. For example, if you want to allow clients to consume but not update resources in your file system, you can set access to Read Only. You can also reduce client root access to your file systems and map specified User IDs (UIDs) and Group IDs (GIDs) to an anonymous UID/GID of your choice. For more information about how NFS export options work with other

No community discussion yet for this question.