The home region is a permanent, unchangeable attribute of an OCI tenancy. It is the region where IAM resources reside and is critical for data residency and sovereignty. Once set, it cannot be changed, making it the foundational decision for compliance with geographic data regulations. While other configurations are important, they can be adjusted later, unlike the immutable home region.

OCI security lists and network security groups operate at the subnet level. If rules are correctly configured there, the next layer of defense is the host-based firewall within the instance’s operating system (e.g., iptables on Linux). This is a common real-world scenario where network traffic reaches the instance but is blocked by the OS, making it the logical next step in troubleshooting.

This design implements a classic DMZ architecture. The web tier needs public access, while the app and DB tiers should be isolated. Using Network Security Groups (NSGs) allows for granular, instance-level security rules (e.g., only the web tier can talk to the app tier on port 8080, and only the app tier can talk to the DB tier on port 1521), enforcing the principle of least privilege effectively.

The statement perfectly describes a core IAM model in OCI. Users are placed into groups for easier management. Policies (written in a specific syntax) are then attached to these groups (or compartments, or the tenancy) to grant permissions. Any user member of a group inherits all permissions granted to that group, which is a standard and efficient practice for access management.

The Archive Tier of OCI Object Storage is specifically designed for long-term retention of data that is rarely accessed. It offers the lowest storage cost but has a retrieval time of several hours and associated retrieval fees. For data that must be kept for years (compliance/audit) and is infrequently accessed, Archive Tier is the most cost-effective choice. Standard Tier would be unnecessarily expensive for this dormant data.

OCI Budgets allows you to set spending thresholds (e.g., $200 per month for the Dev compartment) and configure alert rules (e.g., trigger at 80%, 100%, and 150% of the budget). When the spend on those forgotten instances pushes the compartment over its budget, the responsible team receives email alerts, prompting them to investigate and clean up resources, thus preventing runaway costs.

This is the fundamental definition. An OCI region (e.g., US East Ashburn) is a localized geographic area. Within each region are multiple, physically isolated Availability Domains (ADs). Each AD has its own power, cooling, and network, providing high fault tolerance. Deploying across ADs protects against data center-level failures, which is a core high-availability design principle in OCI.

The ‘Higher Performance’ option for Block Volumes is designed specifically for performance-sensitive workloads like large databases (Oracle DB, SAP HANA) or high-transaction applications. It provides the maximum available IOPS and throughput (MB/s) for a given volume size, ensuring the low latency and high IOPS required by the described application. The ‘Custom’ tier offers granular control but ‘Higher Performance’ is the standard tier for top-tier performance needs.

This is a key concept. Oracle is responsible for the security *of* the cloud (infrastructure, hardware, software, facilities). The customer is always responsible for security *in* the cloud. This includes managing their own data, classifying assets, configuring identity and access management (users, groups, passwords, MFA, policies), and securing their applications. The other options are infrastructure responsibilities handled by Oracle.

The home region is a permanent, unchangeable attribute of an OCI tenancy. It is the region where IAM resources reside and is critical for data residency and sovereignty. Once set, it cannot be changed, making it the foundational decision for compliance with geographic data regulations. While other configurations are important, they can be adjusted later, unlike the immutable home region.0