Prepare For Realistic 1z0-1104-22 Dumps PDF - 100% Passing Guarantee
Check the Available 1z0-1104-22 Exam Dumps with 95 Q's
NEW QUESTION # 24
Which Oracle Cloud Service provides restricted access to target resources?
- A. SSL certificate
- B. Bastion
- C. Internet Gateway
- D. Load balancer
Answer: B
Explanation:
Bastion
Oracle Cloud Infrastructure Bastion provides restricted and time-limited access to target resources that don't have public endpoints.
https://docs.oracle.com/en-us/iaas/Content/Security/Concepts/security_features.htm
NEW QUESTION # 25
What information do you get by using the Network Visualizer tool?
- A. Interconnectivity of VCNs
- B. Organization of subnets and VLANs across availability domains
- C. Routes defined between subnets and gateways
- D. State of subnets in a VCN
Answer: A
Explanation:
https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/network_visualizer.htm You can view and understand the following from this diagram:
How VCNs are inter-connected
How on-premises networks are connected (using FastConnect or Site-to-Site VPN) Which routing entities (DRGs and so on) control traffic routing How your transit routing is configured
NEW QUESTION # 26
You have configured the Management Agent on an Oracle Cloud Infrastructure (OCI) Linux instance for log ingestion purposes.
Which is a required configuration for OCI Logging Analytics service to collect data from multiple logs of this Instance?
- A. Source - Entity Association
- B. Log Group - Source Association
- C. Log - Log Group Association
- D. Entity - Log Association
Answer: A
NEW QUESTION # 27
Which cache rules criterion matches if the concatenation of the requested URL path and query are identical to the contents of the value field?
- A. URL_PART_CONTAINS
- B. URL_IS
- C. URL_PART_ENDS_WITH
- D. URL_STARTS_WITH
Answer: B
Explanation:
URL_IS: Matches if the concatenation of request URL path and query is identical to the contents of the value field. URL must start with a /.
https://docs.oracle.com/en-us/iaas/tools/terraform-provider-oci/4.57.0/docs/d/waas_waas_policy.html
NEW QUESTION # 28
Which WAF service component must be configured to allow, block, or log network requests when they meet specified criteria?
- A. Origin
- B. Web Application Firewall policy
- C. Bot Management
- D. Protection rules
Answer: D
Explanation:
Protection rules
Protection rules can be configured to either allow, block, or log network requests when they meet the specified criteria of a protection rule. The WAF will observe traffic to your web application over time and suggest new rules to apply.
https://www.oracle.com/security/cloud-security/what-is-waf/
NEW QUESTION # 29
Which IAM policy should be created to give XYZ the ability to list contents of a resource excluding the f needs to authenticate in prod compartment ? Principle of least priviledge should be used.
- A. Allow group XYZ to read all resources in tenancy where target.compartment.name != prod
- B. Allow group XYZ to manage all resources in compartment != prod
- C. Allow group XYZ to inspect all resources in tenancy where target.compartment.name != prod
- D. Allow group XYZ to use all resources in compartment != prod
Answer: C
Explanation:
NEW QUESTION # 30
As a lead Security Architect, you have tasked to restrict access to and from the worker nodes in pods running in Oracle Container Engine for Kubernetes?
- A. Vulnerability Scanning
- B. Identity and Access Management
- C. Security Lists
- D. Cloud Guard
Answer: C
Explanation:
NEW QUESTION # 31
Which statements are CORRECT about Multi-Factor Authentication in OCI ? Select TWO correct answers
- A. Members of the Administrators group can disable MFA for other users
- B. Members of the Administrators group cannot enable MFA for another user
- C. Users cannot enable MFA for themselves
- D. A user can register multiple devices to use for MFA.
Answer: A,B
Explanation:
NEW QUESTION # 32
You want software that can automatically collect and aggregate log data generated throughout your organization's infrastructure, analyze it, and send alerts if it detects a deviation from the norm.
Which software must you use?
- A. Security Information and Event Management (SIEM)
- B. Security Event Management (SEM)
- C. Security Information Management (SIM)
- D. Security Integration Management (SIM)
Answer: A
NEW QUESTION # 33
Which statements are CORRECT about Security Zone policy in OCI ? Select TWO correct answers
- A. Block volume can be moved from a security zone to a standard compartment
- B. Bucket can't be moved from a security zone to a standard compartment
- C. Resources in a security zone must be encrypted using customer-managed keys
- D. Resources in a security zone must be accessible from internet
Answer: B,C
Explanation:
NEW QUESTION # 34
Which is NOT a compliance document?
- A. Certificate
- B. Attestation
- C. Penetration test report
- D. Bridge letter
Answer: C
Explanation:
Types of Compliance Documents
When viewing compliance documents, you can filter on the following types:
Attestation. A Payment Card Industry (PCI) Data Security Standard (DSS) Attestation of Compliance document.
Audit. A general audit report.
Bridge Letter (BridgeLetter). A bridge letter. Bridge letters provide compliance information for the period of time between the end date of an SOC report and the date of the release of a new SOC report.
Certificate. A document indicating certification by a particular authority, with regard to certification requirements and examination results conforming to said requirements.
SOC3. A Service Organization Controls 3 audit report that provides information relating to a service organization's internal controls for security, availability, confidentiality, and privacy.
Other. A compliance document that doesn't fit into any of the preceding, more specific categories.
https://docs.oracle.com/en-us/iaas/Content/ComplianceDocuments/Concepts/compliancedocsoverview.htm
NEW QUESTION # 35
How can you establish private connectivity over two VCN within same OCI region without traversing the traffic over public internet ?
- A. Remote VCN Peering
- B. NAT Gateway
- C. Data Guard
- D. Local VCN Peering
Answer: D
Explanation:
NEW QUESTION # 36
Which Security Zone policy is NOT valid?
- A. A boot volume can be moved from a security zone to a standard compartment.
- B. Resources in a security zone should not be accessible from the public internet.
- C. Resources in a security zone must be automatically backed up regularly.
- D. A compute instance cannot be moved from a security zone to a standard compartment.
Answer: A
NEW QUESTION # 37
An e-commerce company needs to authenticate with third-party API that don't support OCI's signature-based authentication.
What can be the solution for the above scenario?
- A. Auth Token/Swift Password
- B. Asymmetric keys
- C. API Key Authentication
- D. Security Token
Answer: A
Explanation:
NEW QUESTION # 38
A company needs to have some buckets as public in the compartment. You want Cloud Guard to ignore the problem associated with public bucket. Select TWO correct answers
- A. Make the bucket private so that Cloud Guard won't detect it
- B. Dismiss the issues associated with these resources
- C. First make the bucket private and after few days make the bucket public again
- D. Configure Conditional groups for the detector to fix base line
Answer: B,D
NEW QUESTION # 39
For how long are API calls audited and available?
- A. 365 days
- B. 60 days
- C. 90 days
- D. 30 days
Answer: C
NEW QUESTION # 40
VCN Flow log record details about the traffic that has been denied or approved is based on which of the following statements?
- A. Auth tokens
- B. Web Application Firewall (WAF)
- C. Configuration of route table
- D. Security Lists or Network Security Group Rules
Answer: D
Explanation:
NEW QUESTION # 41
How can you convert a fixed load balancer to a flexible load balancer?
- A. Using the Edit Listener option.
- B. There is no way to covert the load balancer.
- C. Use Update Shape workflows.
- D. Delete the fixed load balancer and create a new one.
Answer: C
NEW QUESTION # 42
Operations team has made a mistake in updating the secret contents and immediately need to resume using older secret contents in OCI Secret Management within a Vault.
As a Security Administrator, what step should you perform to rollback to last version? Select TWO correct answers.
- A. Mark the secret version as 'Previous'
- B. Mark the secret version as 'deprecated'
- C. Mark the secret version as 'Rewind'
- D. Upload new secret and mark as 'Pending'. Promote this secret version as 'Current'
Answer: A,D
Explanation:
NEW QUESTION # 43
Oracle Object Storage achieves data durability by which of the mechanisms ? Select TWO correct answers
- A. Redundant Storage across availability domains
- B. Service Gateway
- C. Redundant Array of Independent Disks
- D. Object Versioning
Answer: A,D
Explanation:
NEW QUESTION # 44
As a security administrator, you found out that there are users outside your co network who are accessing OCI Object Storage Bucket. How can you prevent these users from accessing OCI resources in corporate network?
- A. Create PAR to restrict access the access
- B. Create an 1AM policy and add a network source
- C. Create an 1AM policy and create WAF rules
- D. Make OCI resources private instead of public
Answer: B
Explanation:
NEW QUESTION # 45
Which of these protects customer data at rest and in transit in a way that allows customers to meet their security and compliance requirements for cryptographic algorithms and key management?
- A. Customer isolation
- B. Data encryption
- C. Security controls
- D. Identity Federation
Answer: B
Explanation:
DATA ENCRYPTION
Protect customer data at-rest and in-transit in a way that allows customers to meet their security and compliance requirements for cryptographic algorithms and key management.
https://docs.oracle.com/en-us/iaas/Content/Security/Concepts/security_overview.htm
NEW QUESTION # 46
......
Download 1z0-1104-22 Exam Dumps Questions to get 100% Success: https://www.test4sure.com/1z0-1104-22-pass4sure-vce.html
100% Accurate Answers! 1z0-1104-22 Actual Real Exam Questions: https://drive.google.com/open?id=1JEYUQv50g_7XuECOLDS2ik4AYLbQCgTI