問題文
An architect is preparing Cloud KMS as the customer-managed key method for an Exadata VM Cluster in OD@GCP. A key ring and a key exist, and the OCI policy written for the compartment of the cluster is in place. The team asks which principal to enter on the key ring, and where to read the value of that principal. What should the architect answer?
選択肢
- The OCI dynamic group whose matching rule holds the identifier of the compartment, entered as a principal on the key ring with the predefined encrypter and decrypter role that Google Cloud offers.
- The Oracle-managed service account read from the details page of an Autonomous AI Database in this project, granted the predefined encrypter and decrypter role that the key ring offers at this key.
- The Google Cloud group of database administrators built for role-based access control and granted the predefined viewer role at the project, because the key discovery follows the administrator who signed in.
- The service account shown inside the GCP information section of the identity connector attached to that VM cluster, granted a custom role with the key version permissions at the key ring and the key.