A. Allow group API_GW to use functions-family
B. Allow any-group to read functions
C. Allow group API_GW to manage functions-family
D. Allow network-family to use api-gateway
A. Inject secrets statically in pipeline config
B. Use insecure registries internally
C. Use Terraform in pipeline to provision infra with policy checks
D. Validate container images against SBOM before build
E. Integrate OCI DevOps with API Gateway validation
A. Add pre-commit hooks to scan for secrets
B. Rotate credentials manually after discovery
C. Use OCI DevOps secret scanning plugin pre-build
D. Store credentials in repo for simplicity
A. Pilot light setup
B. Active-active multi-region
C. Warm standby in same AD
D. Backup-only approach
A. Shared Autonomous DB serverless
B. Multiple VMs per tenant
C. Autonomous DB Dedicated with multiple PDBs
D. Base DB on Exadata
A. Enable BGP auto-failover and community tags
B. Change to VPN fallback
C. Disable interconnect during upgrade
D. Increase circuit bandwidth
A. OCI Activity Log
B. SQL Monitoring in Performance Hub
C. DB Home logs
D. OCI Audit Logs
A. vMotion + manual backup
B. Cloud-init scripts
C. VMware HCX + Block Volume replication
D. Manual snapshots
A. ExpressRoute only
B. Oracle FastConnect with redundant paths
C. Dedicated MPLS
D. Public internet VPN
A. Use KEYS with pattern
B. Run KEYS on a replica
C. Increase timeout on KEYS
D. Use SCAN command iteratively
A. Long-running batch jobs
B. Event-driven data processing
C. Stateless HTTP APIs
D. WebSocket persistent connections
E. Stateful database sessions
A. Rely solely on VM OS logs
B. Use Network Path Analyzer for connectivity tests
C. Verify IAM and network policies for Database Tools access
D. Ignore agent telemetry
A. Use NSGs for TLS termination
B. Deploy dedicated TLS-termination tier
C. Terminate TLS at OCI Load Balancer
D. Have app nodes handle TLS directly
A. Require self-patching, self_tuning, and auto_scaling
B. Minimal workloads
C. Need full OS control
D. Budget constraints
