Table of Contents
Which three controls can a parent tenancy enforce on a child tenancy in OCI Organizations?
Learn how a parent OCI tenancy can enforce governance rules, allowed regions, and quota policies on child tenancies through Organization Management to maintain compliance and cost control.
Question
Which three can a Parent tenancy enforce to a Child tenancy by using OCI Organization Management? Select all apply.
A. IAM policies
B. Governance rules
C. Security policies
D. Allowed regions
E. Quota policies
Answer
B. Governance rules
D. Allowed regions
E. Quota policies
Explanation
In OCI Organization Management, a Parent tenancy can enforce several controls on Child tenancies through governance rules. These rules are created on the parent and then attached to one or more child tenancies, locking the affected resources so that the child cannot modify them.
- B. Governance rules – The parent defines governance rules that constrain what the child can do (for example, which services are accessible or whether certain regions are allowed).
- D. Allowed regions – The parent can create an allowed regions governance rule, which restricts which OCI regions the child tenancy can subscribe to, helping enforce compliance and data‑sovereignty requirements.
- E. Quota policies – The parent can set quota policies via governance rules to limit how much of specific services (such as compute or storage) the child can consume, and these quotas appear locked in the child tenancy’s console.
The other two options are not enforced this way:
- A. IAM policies are defined and managed inside each tenancy; Organization Management does not allow a parent to directly “push down” IAM policies to children.
- C. Security policies is too vague and is not a distinct, OCI‑defined object that the parent can centrally enforce like governance rules, regions, or quotas.
Oracle Cloud Infrastructure Cloud Adoption Framework and Essentials certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the OCI CAF graded quizzes and final assessments, earn OCI CAF digital credential and badge.