Real Oracle 1z0-1104-22 Exam Dumps with Correct 95 Questions and Answers
Valid 1z0-1104-22 Test Answers & Oracle 1z0-1104-22 Exam PDF
NEW QUESTION # 52
As a lead Security Architect, you have tasked to restrict access to and from the worker nodes in pods running in Oracle Container Engine for Kubernetes?
- A. Cloud Guard
- B. Vulnerability Scanning
- C. Identity and Access Management
- D. Security Lists
Answer: D
Explanation:
NEW QUESTION # 53
How can you convert a fixed load balancer to a flexible load balancer?
- A. Use Update Shape workflows.
- B. Delete the fixed load balancer and create a new one.
- C. Using the Edit Listener option.
- D. There is no way to covert the load balancer.
Answer: A
NEW QUESTION # 54
Which OCI cloud service lets you centrally manage the encryption keys that protect your data and the secret credentials that you use to securely access resources?
- A. Vault
- B. Cloud Guard
- C. Data Guard
- D. Data Safe
Answer: A
Explanation:
Oracle Cloud Infrastructure Vault is a managed service that lets you centrally manage the encryption keys that protect your data and the secret credentials that you use to securely access resources. Vaults securely store master encryption keys and secrets that you might otherwise store in configuration files or in code. Specifically, depending on the protection mode, keys are either stored on the server or they are stored on highly available and durable hardware security modules (HSM) that meet Federal Information Processing Standards (FIPS) 140-2 Security Level 3 security certification.
https://docs.oracle.com/en-us/iaas/Content/KeyManagement/Concepts/keyoverview.htm
NEW QUESTION # 55
Where are logs stored?
- A. OCI File Storage
- B. OCI Block Storage
- C. OCI Object Storage
- D. Cloud Agent
Answer: C
Explanation:
You can collect log data continuously from Oracle Cloud Infrastructure (OCI) Object Storage. To enable the log collection, create ObjectCollectionRule resource using REST API or CLI. After the successful creation of this resource and having the required IAM policies, the log collection will be initiated.
https://docs.oracle.com/en-us/iaas/logging-analytics/doc/collect-logs-your-oci-object-storage-bucket.html
NEW QUESTION # 56
With regard to vulnerability and cloud penetration testing, which rules of engagement apply? Select TWO correct answers.
- A. You are responsible for any damages to Oracle Cloud customers that are caused by your testing activities
- B. Any port scanning must be performed in an aggressive mode
- C. Physical penetration and vulnerability testing of Oracle facilities is prohibited
- D. Testing should target any other subscription or any other Oracle Cloud customer resources
Answer: A,C
Explanation:
NEW QUESTION # 57
What do the features of OS Management Service do?
- A. Increase security and reliability by regular bug fixes.
- B. Add complexity in using multiple tools to manage mixed-OS environments.
- C. Provide paid service and support to OCI subscribers for fixes on priority.
- D. Encourage manual setup to avoid machine-induced errors.
Answer: A
Explanation:
https://docs.oracle.com/en/solutions/oci-best-practices/manage-your-operating-systems1.html
NEW QUESTION # 58
How can you restrict access to OCI console from unknown IP addresses?
- A. Make OCI resources private instead of public
- B. Create tenancy's authentication policy and add a network source
- C. Create tenancy's authentication policy and create WAF rules
- D. Create PAR to restrict access the access
Answer: B
Explanation:
NEW QUESTION # 59
With regard to OCI Audit Log Service, which of the statement is INCORRECT?
- A. Events logged by the Audit service can be viewed by using the Console, API, or the SDK for Java
- B. Retention period for audit events cannot be modified
- C. Audit Events gets collected when modification within objects stored in an Object Storage bucket
- D. REST API calls can be recorded by Audit service
Answer: C
NEW QUESTION # 60
Which type of software do you use to centrally distribute and monitor the patch level of systems throughout the enterprise?
- A. Patch Management software
- B. Recovery Manager software
- C. Network Monitor software
- D. Web Application Firewall
Answer: A
Explanation:
https://docs.oracle.com/cd/E11857_01/em.111/e18710/T531901T535649.htm
NEW QUESTION # 61
which two responsibilities will be oracle when you move your it infrastructure to oracle cloud infrastructure?
- A. MAINTAINING CUSTOMER DATA
- B. ACCOUNT ACCESS MANAGEMENT
- C. Strong IAM Framework
- D. Strong Isolation
- E. PROVIDING STRONG SECURITY LIST
Answer: C,D
NEW QUESTION # 62
As a security administrator, you want to create cloud resources that align with Oracle's security principles and best practices. Which security service should you use?
- A. Security Advisor
- B. Cloud Guard
- C. Identity and Access Management
- D. Web Application Firewall (WAF)
Answer: A
Explanation:
NEW QUESTION # 63
Which VCN configuration is CORRECT with regard to VCN peering within a same region ?
- A. 12.0.0.0/16 and 12.0.0.0/16
C 194.168.0.0/24 and 194.168.0.0/24 - B. 194.168.0.0/24 and 194.168.0.0/16
- C. 12.0.0.0/16 and 194.168.0.0/16
Answer: C
NEW QUESTION # 64
Which storage type is most effective when you want to move some unstructured data, consisting of images and videos, to cloud storage?
- A. Standard storage
- B. Block volume
- C. File storage
- D. Archive storage
Answer: A
Explanation:
Use Oracle Cloud Infrastructure Object Storage for data to which you need fast, immediate, and frequent access. Data accessibility and performance justifies a higher price point to store data in the Object Storage tier.
The Object Storage service can store an unlimited amount of unstructured data of any content type, including analytic data and rich content, like images and videos.
https://docs.oracle.com/en/solutions/learn-migrate-app-data-to-cloud/considerations-object-storage.html#GUID-AC192B08-5160-4DA7-B43E-001753D99CF1
NEW QUESTION # 65
Which security issues can be identified by Oracle Vulnerability Scanning Service? Select TWO correct answers
- A. Distributed Denial of Service (DDoS)
- B. CIS published Industry-standard benchmarks
- C. Ports that are unintentionally left open can be a potential attack vector for cloud resources
- D. SQL Injection
Answer: B,C
Explanation:
NEW QUESTION # 66
Which statements are CORRECT about Multi-Factor Authentication in OCI ? Select TWO correct answers
- A. Users cannot enable MFA for themselves
- B. Members of the Administrators group can disable MFA for other users
- C. A user can register multiple devices to use for MFA.
- D. Members of the Administrators group cannot enable MFA for another user
Answer: B,D
Explanation:
NEW QUESTION # 67
In which two ways can you improve data durability in Oracle Cloud Infrastructure Object Storage?
- A. Enable server-side encryption
- B. Setup volumes in a RAID1 configuration
- C. Limit delete permissions
- D. Enable client-side encryption
- E. Enable Versioning
Answer: B
NEW QUESTION # 68
Which of these protects customer data at rest and in transit in a way that allows customers to meet their security and compliance requirements for cryptographic algorithms and key management?
- A. Data encryption
- B. Security controls
- C. Customer isolation
- D. Identity Federation
Answer: A
Explanation:
DATA ENCRYPTION
Protect customer data at-rest and in-transit in a way that allows customers to meet their security and compliance requirements for cryptographic algorithms and key management.
https://docs.oracle.com/en-us/iaas/Content/Security/Concepts/security_overview.htm
NEW QUESTION # 69
Which cache rules criterion matches if the concatenation of the requested URL path and query are identical to the contents of the value field?
- A. URL_STARTS_WITH
- B. URL_PART_CONTAINS
- C. URL_PART_ENDS_WITH
- D. URL_IS
Answer: D
Explanation:
URL_IS: Matches if the concatenation of request URL path and query is identical to the contents of the value field. URL must start with a /.
https://docs.oracle.com/en-us/iaas/tools/terraform-provider-oci/4.57.0/docs/d/waas_waas_policy.html
NEW QUESTION # 70
Cloud Guard detected a risk score of zero in the dashboard, what does this mean ?
- A. LOW or MINOR issues
- B. Larger number of problems that have high risk levels ( HIGH or CRITICAL )
- C. Risk score doesn't say anything. These are just numbers
- D. No problem detected for any resource
Answer: D
Explanation:
NEW QUESTION # 71
On which option do you set Oracle Cloud Infrastructure Budget?
- A. Compartments
- B. Instances
- C. Free-form tags
- D. Tenancy
Answer: A
Explanation:
How Budgets Work
Budgets are set on cost-tracking tags or on compartments (including the root compartment) to track all spending in that cost-tracking tag or for that compartment and its children.
https://docs.oracle.com/en-us/iaas/Content/Billing/Concepts/budgetsoverview.htm
NEW QUESTION # 72
Which parameters customers need to configure while reading secrets by name using CL1 or API? Select TWO correct answers.
- A. ASCII Value
- B. Certificates
- C. Vault Id
- D. Secret Name
Answer: C,D
Explanation:
NEW QUESTION # 73
......
1z0-1104-22 Exam Questions and Valid PMP Dumps PDF: https://www.test4sure.com/1z0-1104-22-pass4sure-vce.html
Oracle 1z0-1104-22 Certification Real 2023 Mock Exam: https://drive.google.com/open?id=14IWmZ_XiisikY4E7YZGDfkvNfbYnipqL