100% Pass Guaranteed Free 1z0-1104-22 Exam Dumps Apr 15, 2023 [Q56-Q77]

ExamBoosts April 15, 2023 1z0-1104-22 > Oracle 0

Rate this post

100% Pass Guaranteed Free 1z0-1104-22 Exam Dumps Apr 15, 2023

Verified & Latest 1z0-1104-22 Dump Q&As with Correct Answers

NO.56 You are using a custom application with third-party APIs to manage application and data hosted in an Oracle Cloud Infrastructure (OCI) tenancy. Although your third-party APIs don’t support OCI’s signature-based authentication, you want them to communicate with OCI resources. Which authentication option must you use to ensure this?

OCI username and Password

API Signing Key

SSH Key Pair with 2048-bit algorithm

Auth Token

NO.57 Which statement is true about origin management in WAF?
Statement A: Multiple origins can be defined.
Statement B: Only a single origin can be active for a WAF.

Only statement B is true.

Both the statements are false.

Both the statements are true.

Only statement A is true.

NO.58 Which architecture is based on the principle of “never trust, always verify”?

Federated identity

Zero trust

Fluid perimeter

Defense in depth

Enterprise Interest in Zero Trust is Growing Ransomware and breaches are top of the news cycle and a major concern for organizations big and small. So, many are now looking at the Zero Trust architecture and its primary principle “never trust, always verify” to provide greater protection.
According to Report Linker, the Zero Trust security market is projected to grow from USD 15.6 billion in 2019 to USD 38.6 billion by 2024 and that sounds right based on the large number of companies pitching their Zero Trust wares at RSA 2020.
The enterprise was well represented at the conference and there was a tremendous amount of interest in Zero Trust. Interestingly, even though Zero Trust environments are often made up of several solutions from multiple vendors it hasn’t prevented each of the vendors from evangelizing their flavors of Zero Trust. This left the thousands of attendees to attempt to cut through the Zero Trust buzz and noise and make their own conclusions to the best approach.
https://blogs.oracle.com/cloudsecurity/post/rsa-2020-recap-cloud-security-moves-to-the-front

NO.59 Which of the following services are NOT Security Services in OCI ? Select TWO answers.

Data Guard

Cloud Guard

Vault

Block Volume

NO.60 With regard to WAF in OCI, which of the following statements are NOT customer’s responsibility? Select TWO answers.

Configure WAF policies for websites

WAF edge nodes with High Availability

Configure Bot Management strategies for a website traffic

Import latest OWASP Core Rule Sets

NO.61 You create a new compartment, “apps,” to host some production apps and you create an apps_group and added users to it.
What would you do to ensure the users have access to the apps compartment?

Add an IAM policy for the individual users to access the apps compartment.

Add an IAM policy for apps_group granting access to the apps compartment.

Add an lAM policy to attach tenancy to the apps group.

No action is required.

NO.62 For how long are API calls audited and available?

30 days

90 days

365 days

60 days

NO.63 What does the following identity policy do?
Allow group my-group to use fn-invocation in compartment ABC where target.function.id = ‘<function-OCID>’

Enables users in a group to create, update, and delete ALL applications and functions in a compartment

Enables users to invoke all the functions in a specific application

Enables users to invoke just one specific function

Enables users to invoke all the functions in a compartment except for one specific function

NO.64 which two responsibilities will be oracle when you move your it infrastructure to oracle cloud infrastructure?

Strong IAM Framework

PROVIDING STRONG SECURITY LIST

Strong Isolation

MAINTAINING CUSTOMER DATA

ACCOUNT ACCESS MANAGEMENT

NO.65 You want software that can automatically collect and aggregate log data generated throughout your organization’s infrastructure, analyze it, and send alerts if it detects a deviation from the norm.
Which software must you use?

Security Information Management (SIM)

Security Event Management (SEM)

Security Integration Management (SIM)

Security Information and Event Management (SIEM)

NO.66 what is the use case for Oracle cloud infrastructure logging analytics service?

monitors, aggregates, indexes and analyzes all log data from on-premises.

labels data packets that pass through the internet gateway

automatically create instances to collect logs analysis and send reports

automatically and manage any log based on a subscription model

Oracle Cloud Infrastructure Logging Analytics is a machine learning-based cloud service that monitors, aggregates, indexes, and analyzes all log data from on-premises and multicloud environments. Enabling users to search, explore, and correlate this data to troubleshoot and resolve problems faster and derive insights to make better operational decisions.
https://www.oracle.com/manageability/logging-analytics/

NO.67 As a security administrator, you found out that there are users outside your co network who are accessing OCI Object Storage Bucket. How can you prevent these users from accessing OCI resources in corporate network?

Create an 1AM policy and create WAF rules

Create an 1AM policy and add a network source

Make OCI resources private instead of public

Create PAR to restrict access the access

NO.68 Which tasks can you perform on a dedicated virtual machine host?

Manual scaling

Creating instance pools

Instance configurations

Capacity reservations

Supported features: Most of the Compute features for VM instances are supported for instances running on dedicated virtual machine hosts. However, the following features are not supported:
Autoscaling
Capacity reservations
Instance configurations
Instance pools
Burstable instances
Reboot migration. You can use manual migration instead
https://docs.oracle.com/en-us/iaas/Content/Compute/Concepts/dedicatedvmhosts.htm#Dedicated_Virtual_Machine_Hosts

NO.69 Which Cloud Guard component identifies issues with resources or user actions and alerts you when an issue is found?

Problems

Targets

Detectors

Responders

Detector
Performs checks to identify potential security problems based on activities or configurations. Rules followed to identify problems are the same for all compartments in a target.
https://docs.oracle.com/en-us/iaas/cloud-guard/using/part-start.htm

NO.70 Which statement is true about standards?

They may be audited.

They are result of a regulation or contractual requirement or an industry requirement.

They are methods and instructions on how to maintain or accomplish the directives of the policy.

They are the foundation of corporate governance.

NO.71 Where is sensitive configuration data (like certificates, and credentials) is stored by Kubernetes cluster control plane?

Block Volume

ETCD

Oracle Functions

Boot Volume

NO.72 Which challenge is generally the first level of bot mitigation, but not sufficient with more advanced bot tools?

CAPTCHA challenge

JavaScript challenge

Device fingerprint challenge

Human interaction challenge

NO.73 Which component helps move logging data to other services, such as archiving log data in object storage?

Agent Configuration

Unified Monitoring Agent

Service Connector Hub

Service Log Category

Service Connector Hub
Service Connector Hub moves logging data to other services in Oracle Cloud Infrastructure. For example, use Service Connector Hub to alarm on log data, send log data to databases, and archive log data to Object Storage. For more information, see Service Connector Hub.
https://docs.oracle.com/en-us/iaas/Content/Logging/Concepts/loggingoverview.htm

NO.74 Which resources can be used to create and manage from Vault Service ? Select TWO correct answers

Secret

IAM

Keys

Cloud Guard