Question 25 of 28 from exam 1Z0-997-20: Oracle Cloud Infrastructure 2020 Architect Professional

Question 25 of 28 from exam 1Z0-997-20: Oracle Cloud Infrastructure 2020 Architect Professional

Question

Your team is conducting a root cause analysis (RCA) following a recent, unplanned outage.

One of the block volumes attached to your production WebLogic server was deleted and you have been tasked with identifying the source of the action.

You search the Audit logs and find several Delete actions that occurred in the previous 24 hours.

Given the sample excerpt of this event:

“event”: {
“tenantid”: “ocidl.tenancy.ocl..aaaaaaaaymp6s54bqkimnbugaaslaaaaa”
“compartmentid”: “ocidi.compartment.oci. .aaaaaaaav4x6vgcsxfnc6k72z25pua3qaaaa”
“compartmentName”: “Production”

“eventId”: “14a87512-db1£-41a5~a4b8-041027d£9£79"

“eventName”: “Deletevolume”

“eventSource”: “BlockVolumes”

“eventType”: “ServiceAPI:

“principalid”: “ocidl.user.ocl..aaaaaaaais7Skkcibz52pz3ualqwxy6ofzd7daagqaaaaa”

“requestAction”: “DELETE”
“requestId” :

“csid06486deb4a7999cec1d51604ce52/£79253£187 fb4b36b170d34bf1£51040/FA112B6BFFOBC30BA95F65084BAS009E”
“requestAgent” : “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)
Chrome/75.0.3770.14..”

“requestHeaders”: {..
}
“requestOrigin”: “129.254.11.219”

“requestResource” :
*/20160918/volumes/ocidi . volume. ocl. iad. abuweljtxksq424fohcczp11lbzzm3wjrrij2ezissSes7u35725kzx4gql7a”
“responseStatus” : “204”

Which item from the event log helps you identify the individual or service that initiated the DeleteVolume API call? (Choose the best answer.)

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D. E.

E.