SIMULATION
Challenge 2 - Task 1
In deploying a new application, a cloud customer needs to reflect different security postures. If a
security zone is enabled with the Maximum Security Zone recipe, the customer will be unable to
create or update a resource in the security zone if the action violates the attached Maximum Security
Zone policy.
As an application requirement, the customer requires a compute instance in the public subnet. You
therefore, need to configure Custom Security Zones that allow the creation of compute instances in
the public subnet.
Review the architecture diagram, which outlines the resoures you'll need to address the
requirement


Preconfigured
To complete this requirement, you are provided with the following
Access to an OCI tenancy, an assigned compartment, and OCI credentials
Required IAM policies
Task 1 Create a Custom Security Zone Recipe
Create a Custom Security Zone Recipe named IAD - SP - PBT - CSP - 01 that allows the provisioning of
compute instances in the public subnet.
Enter the OCID of the created custom security zone recipe in the text box below.

SIMULATION
Challenge 2 - Task 1
In deploying a new application, a cloud customer needs to reflect different security postures. If a
security zone is enabled with the Maximum Security Zone recipe, the customer will be unable to
create or update a resource in the security zone if the action violates the attached Maximum Security
Zone policy.
As an application requirement, the customer requires a compute instance in the public subnet. You
therefore, need to configure Custom Security Zones that allow the creation of compute instances in
the public subnet.
Review the architecture diagram, which outlines the resoures you'll need to address the
requirement:


Preconfigured
To complete this requirement, you are provided with the following
Access to an OCI tenancy, an assigned compartment, and OCI credentials
Required IAM policies
Task 2 Create a Security Zone
Create a security Zone named IAD_SAP - PBT - CSZ - 01 in your assigned compartement and associate it
with the Custom Security Zone Recipe (IAD - SAP - PBT - CSP - 01) created in the previous task.
Enter the OCID of the created Security zone in the box below.

SIMULATION
Challenge 2 - Task 1
In deploying a new application, a cloud customer needs to reflect different security postures. If a
security zone is enabled with the Maximum Security Zone recipe, the customer will be unable to
create or update a resource in the security zone if the action violates the attached Maximum Security
Zone policy.
As an application requirement, the customer requires a compute instance in the public subnet. You
therefore, need to configure Custom Security Zones that allow the creation of compute instances in
the public subnet.
Review the architecture diagram, which outlines the resoures you'll need to address the
requirement:




Preconfigured
To complete this requirement, you are provided with the following
Access to an OCI tenancy, an assigned compartment, and OCI credentials
Required IAM policies
Task3 Create and configure a Virtual Cloud Network and Private Subnet
Create and configure virtual cloud Network (VCN) named IAD SP - PBT - VCN - 01, with an internet
Gateway and configure appropriate route rules to allow external connectivity.
Enter the OCID of the created VCN in the text box below.

SIMULATION
Challenge 2 - Task 1
In deploying a new application, a cloud customer needs to reflect different security postures. If a
security zone is enabled with the Maximum Security Zone recipe, the customer will be unable to
create or update a resource in the security zone if the action violates the attached Maximum Security
Zone policy.
As an application requirement, the customer requires a compute instance in the public subnet. You
therefore, need to configure Custom Security Zones that allow the creation of compute instances in
the public subnet.
Review the architecture diagram, which outlines the resoures you'll need to address the
requirement




Preconfigured
To complete this requirement, you are provided with the following
Access to an OCI tenancy, an assigned compartment, and OCI credentials
Required IAM policies
Task 4 Create a Public Subnet
Create a public subnet named IAD - SP - PBT - PUBSNET - 01, within the VCN IAD - SP - PBT - VCN - 01
use a CIDR block of 10.0.1.0/24 and configure the subnet to use the internet Gateway

SIMULATION
Challenge 2
In deploying a new application, a cloud customer needs to reflect different security postures. If a
security zone is enabled with the Maximum Security Zone recipe, the customer will be unable to
create or update a resource in the security zone if the action violates the attached Maximum Security
Zone policy.
As an application requirement, the customer requires a compute instance in the public subnet. You
therefore, need to configure Custom Security Zones that allow the creation of compute instances in
the public subnet.
Review the architecture diagram, which outlines the resoures you'll need to address the
requirement:


Preconfigured
To complete this requirement, you are provided with the following
Access to an OCI tenancy, an assigned compartment, and OCI credentials
Required IAM policies
Task 5 Provision a Compute Instance
Provision a compute instance in the IAD - SP - PBT - PUBSNET - 01 public subnet, where
Name IAD - SP - PBT - 1 - VM - 01
image Oracle Linux 8
Shape VM Standard, A1, Flex
Enter the OCID of the created compute instance in the text box below.