Skip to main content

1Z0-1104-22 Real Exam Questions

Oracle Cloud Infrastructure 2022 Security Professional

92 questions available · Page 1 of 10

Updated Exam DumpsVerified AnswersPass Guarantee

Get Complete Exam Dumps
Question 1 Single choice

Which of these protects customer data at rest and in transit in a way that allows customers to meet their security and compliance requirements forcryptographic algorithms and key management?

  1. A

    Security controls

  2. B

    Customer isolation

  3. C

    Data encryption

  4. D

    Identity Federation

Show answer and explanation

Correct answer: C

Explanation

DATA ENCRYPTION
Protect customer data at-rest and in-transit in a way that allows customers to meet their security and compliance requirements for cryptographic algorithms and key management.

https://docs.oracle.com/en-us/iaas/Content/Security/Concepts/security_overview.htm

Question 2 Single choice

You want to make API calls against other OCI services from your instance without configuring user credentials.

How would you achieve this?

  1. A

    Create a dynamic group and add apolicy.

  2. B

    Create a dynamic group and add your instance.

  3. C

    Create a group and add a policy.

  4. D

    No configuration is required for making API calls.

Show answer and explanation

Correct answer: A

Explanation

DYNAMIC GROUP
Dynamic groups allow you to group Oracle Cloud Infrastructure instances as principalactors, similar to user groups. You can then create policies to permit instances in these groups to make API calls against Oracle Cloud Infrastructure services. Membership in the group is determined by a set of criteria you define, called matching rules.

https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/callingservicesfrominstances.htm

Question 3 Single choice

Which statement is true about using custom BYOI instances in Windows Servers that are managed by OS Management Service?

  1. A

    Windows Servers that does not have the minimum agent version does not require an agent update or installation.

  2. B

    Windows Servers that already has the minimum agent version does not require an agent update or installation.

  3. C

    Windows Servers that already has the minimum agent version requires an agent update or installation.

  4. D

    Windows Servers that does not have the minimum agent version requires an agent update or installation.

Show answer and explanation

Correct answer: D

Explanation

https://docs.oracle.com/cd/E11857_01/install.111/e15311/agnt_install_windows.htm

Question 4 Single choice

For how long are API calls audited and available?

  1. A

    30days

  2. B

    90 days

  3. C

    365 days

  4. D

    60 days

Show answer and explanation

Correct answer: B

Question 5 Single choice

Which volume type contains the image used to boot a compute instance?

  1. A

    Init 6 volume

  2. B

    Boot volume

  3. C

    Startup volume

  4. D

    Block volume

Show answer and explanation

Correct answer: B

Explanation

Boot Volumes
When you launch a virtual machine (VM) or bare metal instance based on a platform image or custom image, a new boot volume for the instance is created in the same compartment. That boot volume is associated with that instanceuntil you terminate the instance. When you terminate the instance, you can preserve the boot volume and its data
https://docs.oracle.com/en-us/iaas/Content/Block/Concepts/bootvolumes.htm

Question 6 Single choice

Which statement is true about origin management in WAF?

Statement A: Multiple origins can be defined.

Statement B: Only a single origin can be active fora WAF.

  1. A

    Only statement B is true.

  2. B

    Both the statements are false.

  3. C

    Both the statements are true.

  4. D

    Only statement A is true.

Show answer and explanation

Correct answer: C

Question 7 Single choice

Which OCI cloud service lets you centrally manage the encryption keys thatprotect your data and the secret credentials that you use to securely access resources?

  1. A

    Data Safe

  2. B

    Cloud Guard

  3. C

    Data Guard

  4. D

    Vault

Show answer and explanation

Correct answer: D

Explanation

Oracle Cloud Infrastructure Vault is a managed service that lets you centrally manage the encryption keysthat protect your data and the secret credentials that you use to securely access resources. Vaults securely store master encryption keys and secrets that you might otherwise store in configuration files or in code. Specifically, depending on the protection mode, keys are either stored on the server or they are stored on highly available and durable hardware security modules (HSM) that meet Federal Information Processing Standards (FIPS) 140-2 Security Level 3 security certification.

https://docs.oracle.com/en-us/iaas/Content/KeyManagement/Concepts/keyoverview.htm

Question 8 Single choice

What is the matching rule syntax for a single condition?

  1. A

    Option A

  2. B

    Option B

  3. C

    Option C

  4. D

    Option D

Show answer and explanation

Correct answer: C

Explanation
Question 9 Single choice

In which two ways can you improve data durability in Oracle Cloud Infrastructure Object Storage?

  1. A

    Setup volumes in a RAID1 configuration

  2. B

    Enable server-sideencryption

  3. C

    Enable Versioning

  4. D

    Limit delete permissions

  5. E

    Enable client-side encryption

Show answer and explanation

Correct answer: A

Question 10 Multiple choice

Which OCI services can encrypt all data-at-rest ? Select TWO correct answers

  1. A

    File Storage

  2. B

    NAT Gateway

  3. C

    Block Volumes

  4. D

    Geolocation Steering

Show answer and explanation

Correct answers: A, C

Explanation