Oracle 1Z0-1104-22 Online Practice Questions and Exam Preparation

Oracle 1Z0-1104-22 Online Questions & Answers

• Question 61:

  Operations team has made a mistake in updating the secret contents and immediately need to resume usingolder secret contents in OCI Secret Management within a Vault. As a Security Administrator, what step should you perform to rollback to last version? Select TWO correct answers.

  A. Mark the secret version as 'deprecated'
  B. Mark the secret version as'Previous'
  C. Mark the secret version as 'Rewind'
  D. Upload new secret and mark as 'Pending'. Promote this secret version as 'Current'
  B. Mark the secret version as'Previous'
  D. Upload new secret and mark as 'Pending'. Promote this secret version as 'Current'

  ---

  

• Question 62:

  Which component helps move logging data to other services, such as archiving log data in object storage?

  A. Agent Configuration
  B. Unified Monitoring Agent
  C. Service Connector Hub
  D. Service Log Category
  C. Service Connector Hub

  ---

  Service Connector Hub Service Connector Hub moves logging data to other services in Oracle Cloud Infrastructure. For example, use Service Connector Hub to alarm on log data, send log data to databases, and archive log data to Object Storage. For more information, see Service Connector Hub. https://docs.oracle.com/en-us/iaas/Content/Logging/Concepts/loggingoverview.htm

• Question 63:

  Which is NOT a compliance document?

  A. Certificate
  B. Penetration test report
  C. Attestation
  D. Bridge letter
  B. Penetration test report

  ---

  Types of Compliance Documents

  When viewing compliance documents, you can filter onthe following types:

  Attestation. A Payment Card Industry (PCI) Data Security Standard (DSS) Attestation of Compliance document.

  Audit. A general audit report.

  Bridge Letter (BridgeLetter). A bridge letter. Bridge letters provide compliance information forthe period of time between the end date of an SOC report and the date of the release of a new SOC report.

  Certificate. A document indicating certification by a particular authority, with regard to certification requirements and examination results conforming to said requirements.

  SOC3. A Service Organization Controls 3 audit report that provides information relating to a service organization's internal controls for security, availability, confidentiality, and privacy.

  Other. A compliance document that doesn't fit into any of the preceding, more specific categories.

  https://docs.oracle.com/en-us/iaas/Content/ComplianceDocuments/Concepts/compliancedocsoverview.htm

• Question 64:

  Which statements are CORRECT about Multi-Factor Authentication in OCI ? Select TWO correct answers

  A. Members of the Administrators group can disable MFA for other users
  B. Users cannot enable MFA for themselves
  C. A user can registermultiple devices to use for MFA.
  D. Members of the Administrators group cannot enable MFA for another user
  A. Members of the Administrators group can disable MFA for other users
  D. Members of the Administrators group cannot enable MFA for another user

  ---

  

  

• Question 65:

  In which two ways can you improve data durability in Oracle Cloud Infrastructure Object Storage?

  A. Setup volumes in a RAID1 configuration
  B. Enable server-sideencryption
  C. Enable Versioning
  D. Limit delete permissions
  E. Enable client-side encryption
  A. Setup volumes in a RAID1 configuration

• Question 66:

  Your company has hired a consulting firm to audit your oracle cloud infrastructure activity and configuration you have created a set of users who will be performing the audit, you assigned these user to the orgauditgrp group. the auditor required the ability to see the configuration of all resources within tenant and you have agreed to exempt the dev compartment from the audit.

  Which IAM policy should be created to grant the orgauditgrp the ability to look at configuration for all resources except for those resources inside the dev compartment?

  A. allow group orgauditgrp to read all-resources in tenancy where target.compartment.name !=dev
  B. allow group orgauditgrp to read all-resources in compartment !=dev
  C. allow group orgauditgrp to inspect all-resources in tenancy where target compartment.name !=dev
  D. allow group orgauditgrp to inspect all-resources in compartment !=dev
  C. allow group orgauditgrp to inspect all-resources in tenancy where target compartment.name !=dev

• Question 67:

  You create a new compartment, "apps," to host some production apps and you create an apps_group and added users to it. What would you do to ensure the users have access to the apps compartment?

  A. Add an IAM policy for the individual users to access the apps compartment.
  B. Add an IAM policy for apps_group granting access to the apps compartment.
  C. Add an lAM policy to attach tenancy to the apps group.
  D. No action is required.
  B. Add an IAM policy for apps_group granting access to the apps compartment.

• Question 68:

  When doesCloud Guard re-open an issue and update the history?

  A. If it detects an issue again for an Open (unresolved) problem
  B. If it detects an issue for a previously resolved/dismissed activity problem
  C. If it detects an issue for a previously resolved configuration problem
  D. If it detects an issue for a previously dismissed configuration problem
  C. If it detects an issue for a previously resolved configuration problem

  ---

  If Cloud Guard detects an issue again for: https://docs.oracle.com/en-us/iaas/cloud-guard/using/problems-page.htm

• Question 69:

  You have configured the Management Agent on an Oracle Cloud Infrastructure (OCI) Linux instance for log ingestion purposes.

  Which is a required configuration for OCI Logging Analytics service to collect data from multiple logs of this Instance?

  A. Log - Log Group Association
  B. Entity - Log Association
  C. Source - Entity Association
  D. Log Group - Source Association
  C. Source - Entity Association

• Question 70:

  An e-commerce company needs to authenticate with third-party API that don't support OCI's signature-based authentication.

  What can be the solution for the above scenario?

  A. Security Token
  B. API Key Authentication
  C. Asymmetric keys
  D. Auth Token/Swift Password
  D. Auth Token/Swift Password

  ---