Oracle 1Z0-1104-22 Online Practice Questions and Exam Preparation

Oracle 1Z0-1104-22 Online Questions & Answers

• Question 81:

  Which statement about Oracle Cloud Infrastructure Multi-Factor Authentication (MFA)is NOT valid?

  A. Users cannot disable MFA for themselves.
  B. A user can register only one device to use for MFA.
  C. Users must install a supported authenticator app on the mobile device they intend to register for MFA.
  D. An administrator can disable MFA for another user.
  A. Users cannot disable MFA for themselves.

• Question 82:

  What must be configured for a load balancer to accept incoming traffic?

  A. Service Gateway
  B. SSL certificate
  C. Listener
  D. Route table entry pointing to the listener IP address
  C. Listener

  ---

  A listener is an entity that checks for connection requests. The load balancerlistener listens for ingress client traffic using the port you specify within the listener and the load balancer's public IP.

  https://docs.oracle.com/en-us/iaas/Content/GSG/Tasks/loadbalancing.htm To create a listener:

  On your Load Balancer Details page, click Listeners.

  Click Create Listener.

  Enter the following:

  Click Create.

• Question 83:

  Cloud Guard detected a risk score of zeroin the dashboard, what does this mean ?

  A. Risk score doesn't say anything. These are just numbers
  B. LOW or MINOR issues
  C. Larger number of problems that have high risk levels ( HIGH or CRITICAL )
  D. No problem detected for any resource
  D. No problem detected for any resource

  ---

  

• Question 84:

  Which resources can be used to create and manage from Vault Service ? Select TWO correct answers

  A. Secret
  B. IAM
  C. Keys
  D. Cloud Guard
  A. Secret
  C. Keys

  ---

  

• Question 85:

  With regard to WAF in OCI, which of the following statements are NOT customer's responsibility? Select TWO answers.

  A. Configure WAF policies for websites
  B. WAF edge nodes with High Availability
  C. Configure Bot Managementstrategies for a website traffic
  D. Import latest OWASP Core Rule Sets
  B. WAF edge nodes with High Availability
  D. Import latest OWASP Core Rule Sets

• Question 86:

  How can you convert a fixed load balancer to a flexible load balancer?

  A. There is no way to covert the load balancer.
  B. Use Update Shape workflows.
  C. Delete the fixed load balancer and create a new one.
  D. Using the Edit Listener option.
  B. Use Update Shape workflows.

• Question 87:

  Select the component that encompasses the overall configuration of your WAF service on OCI.

  A. Protection rules
  B. Bot Management
  C. Web Application Firewall policy
  D. Origin
  C. Web Application Firewall policy

  ---

  WAF Policy Management

  Provides an overview of web application firewall (WAF) policies, including their creation, updating, and deletion.

  WAF policies encompass the overall configuration of your WAF service, includingaccess rules, rate limiting rules, and protection rules.

  https://docs.oracle.com/en-us/iaas/Content/WAF/Policies/waf-policy_management.htm

• Question 88:

  A company has OCI tenancy which has mount target associated with two File Systems, CG_1 and CG_2. These FileSystems are accessed by IP-based clients AB_1 and AB_2 respectively. As a security administrator, how can you provide access to both clients such that CGI has Read only access on AB1 and CG_2 has Read/Write access on AB_2?

  A. NFS Export Option
  B. Access Control Lists
  C. NFS v3 Unix Security
  D. Vault
  A. NFS Export Option
  C. NFS v3 Unix Security

  ---

  

• Question 89:

  Which OCI services can encrypt all data-at-rest ? Select TWO correct answers

  A. File Storage
  B. NAT Gateway
  C. Block Volumes
  D. Geolocation Steering
  A. File Storage
  C. Block Volumes

• Question 90:

  Which of the following is necessary step when creating a secret in vault?

  A. Vault-managed key is necessary to encrypt the secret
  B. Digest Hash shouldbe created of the secret value
  C. Object Storage must be created to run secret service
  D. Shamir's secret sharing algorithm should be used to unseal the vault
  A. Vault-managed key is necessary to encrypt the secret

  ---

  https://docs.oracle.com/en/database/other- databases/essbase/21/essad/create-vault-and-secrets.html