Oracle 1Z0-1104-22 Online Practice Questions and Exam Preparation

Oracle 1Z0-1104-22 Online Questions & Answers

• Question 1:

  Which Security Zone policy is NOT valid?

  A. A boot volume can be moved from a security zone to a standard compartment.
  B. A compute instance cannot be moved from a security zone to a standard compartment.
  C. Resources in asecurity zone should not be accessible from the public internet.
  D. Resources in a security zone must be automatically backed up regularly.
  A. A boot volume can be moved from a security zone to a standard compartment.

• Question 2:

  You want to make API calls against other OCI services from your instance without configuring user credentials. How would you achieve this?

  A. Create a dynamic group and add apolicy.
  B. Create a dynamic group and add your instance.
  C. Create a group and add a policy.
  D. No configuration is required for making API calls.
  A. Create a dynamic group and add apolicy.

  ---

  explanation:

  DYNAMIC GROUP Dynamic groups allow you to group Oracle Cloud Infrastructure instances as principalactors, similar to user groups. You can then create policies to permit instances in these groups to make API calls against Oracle Cloud Infrastructure services. Membership in the group is determined by a set of criteria you define, called matching rules.

  https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/callingservicesfrominstances.htm

• Question 3:

  VCN Flow log record details about the traffic that has been denied or approved is based on which of the following statements?

  A. Configuration of route table
  B. Security Lists orNetwork Security Group Rules
  C. Web Application Firewall (WAF)
  D. Auth tokens
  B. Security Lists orNetwork Security Group Rules

  ---

  explanation:

  

• Question 4:

  Which cache rules criterion matches if the concatenation of the requested URL path and query are identical to the contents of the value field?

  A. URL_PART_CONTAINS
  B. URL_IS
  C. URL_PART_ENDS_WITH
  D. URL_STARTS_WITH
  B. URL_IS

  ---

  explanation:

  URL_IS: Matches if the concatenation of request URL path and query is identical to the contents of the value field. URL must start with a /. https://docs.oracle.com/en-us/iaas/tools/terraform-provider- oci/4.57.0/docs/d/waas_waas_policy.html

• Question 5:

  You want software that can automatically collect and aggregate log data generated throughout your organization's infrastructure, analyze it, and send alerts if it detects a deviation from the norm. Which software must you use?

  A. Security Information Management (SIM)
  B. SecurityEvent Management (SEM)
  C. Security Integration Management (SIM)
  D. Security Information and Event Management (SIEM)
  D. Security Information and Event Management (SIEM)

• Question 6:

  How can you establish private connectivity over two VCN within same OCI region without traversing the traffic over public internet ?

  A. NAT Gateway
  B. Data Guard
  C. Remote VCN Peering
  D. Local VCN Peering
  D. Local VCN Peering

  ---

  explanation:

  

• Question 7:

  Cloud Guard detected a risk score of zeroin the dashboard, what does this mean ?

  A. Risk score doesn't say anything. These are just numbers
  B. LOW or MINOR issues
  C. Larger number of problems that have high risk levels ( HIGH or CRITICAL )
  D. No problem detected for any resource
  D. No problem detected for any resource

  ---

  explanation:

  

• Question 8:

  What do the features of OS Management Service do?

  A. Add complexity in using multiple tools tomanage mixed-OS environments.
  B. Provide paid service and support to OCI subscribers for fixes on priority.
  C. Increase security and reliability by regular bug fixes.
  D. Encourage manual setup to avoid machine-induced errors.
  C. Increase security and reliability by regular bug fixes.

  ---

  explanation:

  https://docs.oracle.com/en/solutions/oci-best-practices/manage-your- operating-systems1.html

• Question 9:

  Your company has hired a consulting firm to audit your oracle cloud infrastructure activity and configuration you have created a set of users who will be performing the audit, you assigned these user to the orgauditgrp group. the auditor required the ability to see the configuration of all resources within tenant and you have agreed to exempt the dev compartment from the audit.

  Which IAM policy should be created to grant the orgauditgrp the ability to look at configuration for all resources except for those resources inside the dev compartment?

  A. allow group orgauditgrp to read all-resources in tenancy where target.compartment.name !=dev
  B. allow group orgauditgrp to read all-resources in compartment !=dev
  C. allow group orgauditgrp to inspect all-resources in tenancy where target compartment.name !=dev
  D. allow group orgauditgrp to inspect all-resources in compartment !=dev
  C. allow group orgauditgrp to inspect all-resources in tenancy where target compartment.name !=dev

• Question 10:

  What is the use case for Oracle cloudinfrastructure logging analytics service?

  A. monitors, aggregates, indexes and analyzes all log data from on-premises.
  B. labels data packets that pass through the internet gateway
  C. automatically create instances to collect logs analysis and send reports
  D. automatically and manage any log based on a subscription model
  A. monitors, aggregates, indexes and analyzes all log data from on-premises.

  ---

  explanation:

  Oracle Cloud Infrastructure Logging Analytics is a machine learning-based cloud service that monitors, aggregates, indexes, and analyzes all log data from on- premises and multicloud environments. Enabling users to search, explore, and

  correlate this data to troubleshoot and resolve problems faster and derive insights to make better operational decisions.

  https://www.oracle.com/manageability/logging-analytics/