Sample question 1 — Identity and Access Management
An organization has multiple teams working in OCI. They want to isolate billing and resource access between teams while maintaining centralized identity management. Which OCI IAM feature provides logical isolation with separate cost tracking?
- A. Creating separate OCI tenancies for each team with federated identity across tenancies using SAML.
- B. Creating compartments for each team within a single tenancy with IAM policies controlling resource.
- C. Using resource tags to categorize resources by team and generating cost reports filtered by tags.
- D. Creating separate VCNs for each team with network security lists preventing cross-team resource access.
Answer: B. Compartments are logical containers within an OCI tenancy that provide resource isolation, access control, and cost tracking. You create compartments for different teams/projects/environments, then use IAM policies to control who can access resources in each compartment. Cost analysis and reporting automatically breaks down spending by compartment. This provides strong isolation without the overhead of multiple tenancies. Separate tenancies (Option A) add complexity in identity management. Resource tags (Option C) support cost allocation but don't provide access control. VCNs (Option D) provide network isolation but not IAM-level resource access control.