VCEdump

1Z0-1104-22 Oracle Cloud Infrastructure 2022 Security Professional

PDF question preview Back to product

Reading controls

Reader tools

Free demo

14 of 92 questions

Purchase the full version to unlock every question and answer.

View the full question set

Preview tools

Try Web TestEngine

Question formats

Single choice10

Multiple choice4

Oracle · 1Z0-1104-22

Free 1Z0-1104-22 Exam Dumps Preview

Preview real exam questions, verified answers and available explanations before choosing a study plan.

Question 1

Single choice

Logical isolation for resources is provided by which OCI feature?

A
Tenancy
B
Availability Zone
C
Region
D
Compartments

Reveal answer details Close answer details

Correct answerD

Question 2

Multiple choice

Which parameters customers need to configure while reading secrets by name using CL1 or API? Select
TWO correct answers.

A
Certificates
B
Secret Name
C
ASCII Value
D
Vault Id

Reveal answer details Close answer details

Correct answersB, D

Explanation

Question 3

Single choice

You want to include all instances in any of two or morecompartments, which syntax should you use for dynamic policy you want to create for "Prod" compartment and "SIT" compartment?

Prod OCID : `JON.Prod'

SIT OCID : 'JON.SIT'

A
Any { instance in compartment `Prod' and Compartment 'SIT' }
B
Any { instance.compartment.id = 'JON.Prod', instance.compartment.id = 'JON.SIT'
C
All { instance.compartment.id = 'JON.Prod', instance.compartment.id = 'JON.SIT'
D
All { instance in compartment 'Prod' and Compartment 'SIT' }

Reveal answer details Close answer details

Correct answerB

Explanation

Question 4

Single choice

You want to make API calls against other OCI services from your instance without configuring user credentials.

How would you achieve this?

A
Create a dynamic group and add apolicy.
B
Create a dynamic group and add your instance.
C
Create a group and add a policy.
D
No configuration is required for making API calls.

Reveal answer details Close answer details

Correct answerA

Explanation

DYNAMIC GROUP
Dynamic groups allow you to group Oracle Cloud Infrastructure instances as principalactors, similar to user groups. You can then create policies to permit instances in these groups to make API calls against Oracle Cloud Infrastructure services. Membership in the group is determined by a set of criteria you define, called matching rules.

https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/callingservicesfrominstances.htm

Question 5

Single choice

For how long are API calls audited and available?

A
30days
B
90 days
C
365 days
D
60 days

Reveal answer details Close answer details

Correct answerB

Question 6

Single choice

When doesCloud Guard re-open an issue and update the history?

A
If it detects an issue again for an Open (unresolved) problem
B
If it detects an issue for a previously resolved/dismissed activity problem
C
If it detects an issue for a previously resolved configuration problem
D
If it detects an issue for a previously dismissed configuration problem

Reveal answer details Close answer details

Correct answerC

Explanation

If Cloud Guard detects an issue again for:

https://docs.oracle.com/en-us/iaas/cloud-guard/using/problems-page.htm

Question 7

Multiple choice

Bot Management in OCI provides which of the features? Select TWO correct answers.

A
Bad Bot Denylist
B
CAPTCHA Challenge
C
IP Prefix Steering
D
Good Bot Allowlist

Reveal answer details Close answer details

Correct answersB, D

Explanation

Question 8

Multiple choice

When creating an OCI Vault, which factors may lead to select the Virtual Private Vault? Select TWO correct answers

A
Need for more than 9211 key versions
B
Greater degree of isolation
C
To mask Pll data for non-production environment
D
Ability to back up the vault

Reveal answer details Close answer details

Correct answersB, D

Explanation

Question 9

Multiple choice

With regard to vulnerability and cloud penetration testing, which rules of engagement apply? Select TWO correct answers.

A
Any port scanning must be performed in an aggressive mode
B
Physical penetration and vulnerability testing of Oraclefacilities is prohibited
C
Testing should target any other subscription or any other Oracle Cloud customer resources
D
You are responsible for any damages to Oracle Cloud customers that are caused by your testing activities

Reveal answer details Close answer details

Correct answersB, D

Explanation

Question 10

Single choice

How can you convert a fixed load balancer to a flexible load balancer?

A
There is no way to covert the load balancer.
B
Use Update Shape workflows.
C
Delete the fixed load balancer and create a new one.
D
Using the Edit Listener option.

Reveal answer details Close answer details

Correct answerB

Question 11

Single choice

Where is sensitive configuration data (like certificates, and credentials) is stored by Kubernetes cluster control plane?

A
Block Volume
B
ETCD
C
Oracle Functions
D
Boot Volume

Reveal answer details Close answer details

Correct answerB

Explanation

Question 12

Single choice

What is the matching rule syntax for a single condition?

A
Option A
B
Option B
C
Option C
D
Option D

Reveal answer details Close answer details

Correct answerC

Explanation

Question 13

Single choice

Which OCI cloud service lets you centrally manage the encryption keys thatprotect your data and the secret credentials that you use to securely access resources?

A
Data Safe
B
Cloud Guard
C
Data Guard
D
Vault

Reveal answer details Close answer details

Correct answerD

Explanation

Oracle Cloud Infrastructure Vault is a managed service that lets you centrally manage the encryption keysthat protect your data and the secret credentials that you use to securely access resources. Vaults securely store master encryption keys and secrets that you might otherwise store in configuration files or in code. Specifically, depending on the protection mode, keys are either stored on the server or they are stored on highly available and durable hardware security modules (HSM) that meet Federal Information Processing Standards (FIPS) 140-2 Security Level 3 security certification.

https://docs.oracle.com/en-us/iaas/Content/KeyManagement/Concepts/keyoverview.htm

Question 14

Single choice

As a security administrator, you found out that there are users outside your co network who are accessing OCI Object Storage Bucket.

How can you prevent these users from accessing OCI resources in corporate network?

A
Create an 1AM policy and create WAF rules
B
Create an 1AM policy and add a network source
C
Make OCI resources private instead of public
D
Create PAR to restrict access the access

Reveal answer details Close answer details

Correct answerB

Explanation

Free 1Z0-1104-22 Exam Dumps Preview

Oracle Cloud Infrastructure 2022 Security Professional

PREVIEW CONTENTS · 2 VOLUMES

QUESTION 1

QUESTION 2

QUESTION 3

QUESTION 4

QUESTION 5

QUESTION 6

QUESTION 7

QUESTION 8

QUESTION 9

QUESTION 10

QUESTION 11

QUESTION 12

QUESTION 13

QUESTION 14

VOL	TYPE	QUESTIONS
1	Single choice	10
2	Multiple choice	4