Oracle 1Z0-1104-22 Online Practice Questions and Exam Preparation

Oracle 1Z0-1104-22 Online Questions & Answers

• Question 51:

  What does an audit log event include?

  A. Audit type
  B. Header
  C. Footer
  D. Type of input
  B. Header

  ---

  The HTTP header fields and values in the request. https://docs.oracle.com/en-us/iaas/Content/Audit/Reference/logeventreference.htm

• Question 52:

  A http web server hosted on an Oracle cloud infrastructure compute instance in a public subnet of the vcsl virtual cloudnetwork has a stateless security ingress rule for port 80 access through internet gateway stateful network security group notification for port 80 how will the Oci vcn handle request response traffic to the compute instance for a web page from the http server with port 80?

  A. network security group would supersede the security utility list and allow both inbound and outbound traffic
  B. the union of both configuration would happen and allow both inbound and outbound traffic
  C. due to the conflict in security configuration inbound request traffic would not be allowed
  D. Because there is no Egress ruled defined in Security List, The Response would not pass through Internet Gateway.
  D. Because there is no Egress ruled defined in Security List, The Response would not pass through Internet Gateway.

• Question 53:

  You subscribe to a PaaS service that follows the Shared Responsibility model. Which type of security is your responsibility?

  A. Network
  B. Infrastructure
  C. Data
  D. Guest OS
  C. Data

  ---

  https://www.oracle.com/a/ocom/docs/cloud/oracle-ctr-2020-shared- responsibility.pdf

• Question 54:

  Which Security Zone policy is NOT valid?

  A. A boot volume can be moved from a security zone to a standard compartment.
  B. A compute instance cannot be moved from a security zone to a standard compartment.
  C. Resources in asecurity zone should not be accessible from the public internet.
  D. Resources in a security zone must be automatically backed up regularly.
  A. A boot volume can be moved from a security zone to a standard compartment.

• Question 55:

  Which type of firewalls are designed to protect against web application attacks, such as SQL injection and cross-site scripting?

  A. Stateful inspection firewall
  B. Web Application Firewall
  C. Incident firewall
  D. Packet filtering firewall
  B. Web Application Firewall

  ---

  SQL injections. Cross-site scripting. Distributed denial of service(DDoS) attacks. Botnets. These are just some of the cyber-weapons increasingly being used by malicious actors to target web applications, cause data breaches, and expose

  sensitive business information.

  Oracle WAF uses a multilayered approach to protect web applications from a host of cyberthreats including malicious bots, application layer (L7) DDoS attacks, cross-site scripting, SQL injection, and vulnerabilities defined by the Open Web

  Application Security Project (OWASP). When a threat is identified, Oracle WAF automatically blocks it and alerts security operations teams so they can investigate further.

  https://www.oracle.com/a/ocom/docs/security/oci-web-application-firewall.pdf

• Question 56:

  Which statements are CORRECT about Security Zone policy in OCI ? Select TWO correct answers

  A. Block volume canbe moved from a security zone to a standard compartment
  B. Bucket can't be moved from a security zone to a standard compartment
  C. Resources in a security zone must be accessible from internet
  D. Resources in a security zone must be encrypted using customer-managed keys
  B. Bucket can't be moved from a security zone to a standard compartment
  D. Resources in a security zone must be encrypted using customer-managed keys

• Question 57:

  Which WAF service component must be configured to allow, block, or log network requests when they meet specified criteria?

  A. Protection rules
  B. Bot Management
  C. Origin
  D. Web ApplicationFirewall policy
  A. Protection rules

  ---

  Protection rules

  Protection rules can be configured to either allow, block, or log network requests when they meet the specified criteria of a protection rule. The WAF will observe traffic to your web application over time and suggest new rules to apply.

  https://www.oracle.com/security/cloud-security/what-is-waf/

• Question 58:

  Which of these protects customer data at rest and in transit in a way that allows customers to meet their security and compliance requirements forcryptographic algorithms and key management?

  A. Security controls
  B. Customer isolation
  C. Data encryption
  D. Identity Federation
  C. Data encryption

  ---

  DATA ENCRYPTION

  Protect customer data at-rest and in-transit in a way that allows customers to meet their security and compliance requirements for cryptographic algorithms and key management.

  https://docs.oracle.com/en-us/iaas/Content/Security/Concepts/security_overview.htm

• Question 59:

  On which option do you set Oracle Cloud Infrastructure Budget?

  A. Compartments
  B. Instances
  C. Free-form tags
  D. Tenancy
  A. Compartments

  ---

  How Budgets Work

  Budgets are set on cost-tracking tags or on compartments (including theroot compartment) to track all spending in that cost-tracking tag or for that compartment and its children.

  https://docs.oracle.com/en-us/iaas/Content/Billing/Concepts/budgetsoverview.htm

• Question 60:

  Which type of software do you use to centrally distributeand monitor the patch level of systems throughout the enterprise?

  A. Network Monitor software
  B. Web Application Firewall
  C. Patch Management software
  D. Recovery Manager software
  C. Patch Management software

  ---

  https://docs.oracle.com/cd/E11857_01/em.111/e18710/T531901T535649.htm