Oracle Oracle Cloud Infrastructure 1Z0-1104-22 Questions & Answers

• Question 1:

  Which Security Zone policy is NOT valid?

  A. A boot volume can be moved from a security zone to a standard compartment.

  B. A compute instance cannot be moved from a security zone to a standard compartment.

  C. Resources in asecurity zone should not be accessible from the public internet.

  D. Resources in a security zone must be automatically backed up regularly.

  Correct Answer: A

• Question 2:

  VCN Flow log record details about the traffic that has been denied or approved is based on which of the following statements?

  A. Configuration of route table

  B. Security Lists orNetwork Security Group Rules

  C. Web Application Firewall (WAF)

  D. Auth tokens

  Correct Answer: B

  

• Question 3:

  You want to make API calls against other OCI services from your instance without configuring user credentials. How would you achieve this?

  A. Create a dynamic group and add apolicy.

  B. Create a dynamic group and add your instance.

  C. Create a group and add a policy.

  D. No configuration is required for making API calls.

  Correct Answer: A

  DYNAMIC GROUP Dynamic groups allow you to group Oracle Cloud Infrastructure instances as principalactors, similar to user groups. You can then create policies to permit instances in these groups to make API calls against Oracle Cloud Infrastructure services. Membership in the group is determined by a set of criteria you define, called matching rules.

  https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/callingservicesfrominstances.htm

• Question 4:

  You want software that can automatically collect and aggregate log data generated throughout your organization's infrastructure, analyze it, and send alerts if it detects a deviation from the norm. Which software must you use?

  A. Security Information Management (SIM)

  B. SecurityEvent Management (SEM)

  C. Security Integration Management (SIM)

  D. Security Information and Event Management (SIEM)

  Correct Answer: D

• Question 5:

  Which cache rules criterion matches if the concatenation of the requested URL path and query are identical to the contents of the value field?

  A. URL_PART_CONTAINS

  B. URL_IS

  C. URL_PART_ENDS_WITH

  D. URL_STARTS_WITH

  Correct Answer: B

  URL_IS: Matches if the concatenation of request URL path and query is identical to the contents of the value field. URL must start with a /. https://docs.oracle.com/en-us/iaas/tools/terraform-provider- oci/4.57.0/docs/d/waas_waas_policy.html

• Question 6:

  What do the features of OS Management Service do?

  A. Add complexity in using multiple tools tomanage mixed-OS environments.

  B. Provide paid service and support to OCI subscribers for fixes on priority.

  C. Increase security and reliability by regular bug fixes.

  D. Encourage manual setup to avoid machine-induced errors.

  Correct Answer: C

  https://docs.oracle.com/en/solutions/oci-best-practices/manage-your- operating-systems1.html

• Question 7:

  Cloud Guard detected a risk score of zeroin the dashboard, what does this mean ?

  A. Risk score doesn't say anything. These are just numbers

  B. LOW or MINOR issues

  C. Larger number of problems that have high risk levels ( HIGH or CRITICAL )

  D. No problem detected for any resource

  Correct Answer: D

  

• Question 8:

  How can you establish private connectivity over two VCN within same OCI region without traversing the traffic over public internet ?

  A. NAT Gateway

  B. Data Guard

  C. Remote VCN Peering

  D. Local VCN Peering

  Correct Answer: D

  

• Question 9:

  Your company has hired a consulting firm to audit your oracle cloud infrastructure activity and configuration you have created a set of users who will be performing the audit, you assigned these user to the orgauditgrp group. the auditor required the ability to see the configuration of all resources within tenant and you have agreed to exempt the dev compartment from the audit.

  Which IAM policy should be created to grant the orgauditgrp the ability to look at configuration for all resources except for those resources inside the dev compartment?

  A. allow group orgauditgrp to read all-resources in tenancy where target.compartment.name !=dev

  B. allow group orgauditgrp to read all-resources in compartment !=dev

  C. allow group orgauditgrp to inspect all-resources in tenancy where target compartment.name !=dev

  D. allow group orgauditgrp to inspect all-resources in compartment !=dev

  Correct Answer: C

• Question 10:

  A member of operations team has set Pre-Authenticated Request (PAR) associated with a bucket to an incorrect date and now wants to edit the PARrequest. How can this be achieved?

  A. Don't set an expiration time for PAR

  B. Delete the bucket associated with PAR and recreate it

  C. Delete the PAR and recreate it with the required date

  D. Delete both PAR as well as the bucket then recreate both

  Correct Answer: C