Oracle 1Z0-1104-22 Online Practice Questions and Exam Preparation

Oracle 1Z0-1104-22 Online Questions & Answers

• Question 21:

  As a security administrator, you want to create cloud resources that alignwith Oracle's security principles and best practices. Which security service should you use?

  A. Identity and Access Management
  B. Cloud Guard
  C. Security Advisor
  D. Web Application Firewall (WAF)
  C. Security Advisor

• Question 22:

  An automobile company needs to configure Bastion Managed SSH session to a compute instance in a private subnet. What are the TWO prerequisites to configure successfully?

  A. NAT or Service Gateway should be attached to the private subnet
  B. There is no need for any gateway in private subnet
  C. SSH port forwarding should be enabled
  D. Route rule to a NAT or Service Gateway should be associated with the subnet of the route table
  A. NAT or Service Gateway should be attached to the private subnet
  D. Route rule to a NAT or Service Gateway should be associated with the subnet of the route table

• Question 23:

  When using Management Agent to collect logs continuously, which is therequired configuration for OCI Logging Analytics to retrieve data from numerous logs for an instance?

  A. Source-Entity Association
  B. Entity - Source Association
  C. Agent - Entity Association
  D. Entity - Agent Association
  A. Source-Entity Association

  ---

  

• Question 24:

  Which type of file system does file storage use?

  A. NFSv3
  B. iSCSI
  C. Paravirtualized
  D. NVMe
  E. SSD
  A. NFSv3

  ---

  The File Storage service supports the Network File System version 3.0 (NFSv3) protocol. The service supports the Network Lock Manager (NLM) protocol for file locking functionality. https://docs.oracle.com/en-us/iaas/Content/File/Concepts/filestorageoverview.htm

• Question 25:

  How can you restrict access to OCI console from unknown IP addresses?

  A. Create tenancy's authentication policy and create WAF rules
  B. Create tenancy's authentication policy and add a network source
  C. Make OCI resources private instead of public
  D. Create PAR to restrict access the access
  B. Create tenancy's authentication policy and add a network source

• Question 26:

  Which securityissues can be identified by Oracle Vulnerability Scanning Service? Select TWO correct answers

  A. Distributed Denial of Service (DDoS)
  B. Ports that are unintentionally left open can be a potential attack vector for cloud resources
  C. SQL Injection
  D. CISpublished Industry-standard benchmarks
  B. Ports that are unintentionally left open can be a potential attack vector for cloud resources
  D. CISpublished Industry-standard benchmarks

  ---

  

• Question 27:

  Which VCNconfiguration is CORRECT with regard to VCN peering within a same region ?

  A. 12.0.0.0/16 and 194.168.0.0/16
  B. 12.0.0.0/16 and 12.0.0.0/16
  C. 194.168.0.0/24 and 194.168.0.0/24
  D. 194.168.0.0/24 and 194.168.0.0/16
  A. 12.0.0.0/16 and 194.168.0.0/16

• Question 28:

  Logical isolation for resources is provided by which OCI feature?

  A. Tenancy
  B. Availability Zone
  C. Region
  D. Compartments
  D. Compartments

• Question 29:

  You want to create a stateless rule forSSH in security list and the ingress role has already been properly configured what combination should you use on the engress role what commination should you use on the egress rule?

  A. select udp for protocol: enter 22 for source port" and all for destination port
  B. select tcp for protocol: enter 22 for source port" and 22 for destination port
  C. select tcp for protocol: enter all for source port" and 22 for destination port.
  D. select tcp for protocol: enter 22 for source port" and all for destinationport
  C. select tcp for protocol: enter all for source port" and 22 for destination port.

• Question 30:

  A number ofmalicious requests for a web application is coming from a set of IP addresses originating from Antartica.

  Which of the following statement will help to reduce these types of unauthorized requests ?

  A. Delete NAT Gateway from Virtual Cloud Network
  B. Use WAF policy using Access Control Rules
  C. List specific set of IP addresses then deny rules in Virtual Cloud Network Security Lists
  D. Change your home region in which your resources are currently deployed
  B. Use WAF policy using Access Control Rules