Go to 1z0-1104-22 Questions – Try 1z0-1104-22 dumps pdf [Q33-Q54]

ExamBoosts February 25, 2023 1z0-1104-22 > Oracle 0

Rate this post

Go to 1z0-1104-22 Questions – Try 1z0-1104-22 dumps pdf

Dumps Practice Exam Questions Study Guide for the 1z0-1104-22 Exam

Oracle 1z0-1104-22 Exam Syllabus Topics:

Topic	Details
Topic 1	Describe key capabilities provided by Data Safe Use Compartments to isolate resources
Topic 2	Understand and implement Security Zones and Security Advisor Understand MFA, Identity Federation, and SSO
Topic 3	Configure Network Security Groups (NSGs) and Security Lists Cloud Security Business Drivers and Challenges
Topic 4	Describe OCI Shared Security Responsibility Model Configure security for OKE and Oracle Functions
Topic 5	Configure Dynamic Groups, Network Sources, and Tag-Based Access Control Secure connectivity of virtual networks (DRG v2, Peering)
Topic 6	Configure security for Oracle Autonomous Database and DB Systems Describe the use case for Penetration and Vulnerability Testing
Topic 7	Describe the use case for VCN Flow Logs Create and configure Web Application Firewall
Topic 8	Design and implement a logging and logging analytics solution Secure connectivity of hybrid networks (Site-to-Site VPN, FastConnect)
Topic 9	Describe the use case for auditing and review OCI Audit Logs Implement conditional and advanced policies

QUESTION 33
As a solutions architect, you need to assist operations team to write an I AM policy to give users in group-uat1 and group- uat2 access to manage all resources in the compartment Uat. Which is the CORRECT IAM policy ?

Allow any-user to manage all resources in tenancy where target.compartment= Uat

Allow any-user to manage all resources in compartment Uat where request.group=/group-uat/*

Allow group /group-uat*/ to manage all resources in compartment Uat

Allow group group-uat1 group-uat2 to manage all resources in compartment Uat

QUESTION 34
A company has OCI tenancy which has mount target associated with two File Systems, CG_1 and CG_2. These File Systems are accessed by IP-based clients AB_1 and AB_2 respectively. As a security administrator, how can you provide access to both clients such that CGI has Read only access on AB1 and CG_2 has Read/Write access on AB_2?

NFS Export Option

Access Control Lists

NFS v3 Unix Security

Vault

QUESTION 35
As a security administrator, you found out that there are users outside your co network who are accessing OCI Object Storage Bucket. How can you prevent these users from accessing OCI resources in corporate network?

Create an 1AM policy and create WAF rules

Create an 1AM policy and add a network source

Make OCI resources private instead of public

Create PAR to restrict access the access

QUESTION 36
How can you convert a fixed load balancer to a flexible load balancer?

There is no way to covert the load balancer.

Use Update Shape workflows.

Delete the fixed load balancer and create a new one.

Using the Edit Listener option.

QUESTION 37
As a security architect, how can you prevent unwanted bots while desirable bots are allowed to enter?

Data Guard

Vault

Compartments

Web Application Firewall (WAF)

QUESTION 38
Which of these protects customer data at rest and in transit in a way that allows customers to meet their security and compliance requirements for cryptographic algorithms and key management?

Security controls

Customer isolation

Data encryption

Identity Federation

DATA ENCRYPTION
Protect customer data at-rest and in-transit in a way that allows customers to meet their security and compliance requirements for cryptographic algorithms and key management.
https://docs.oracle.com/en-us/iaas/Content/Security/Concepts/security_overview.htm

QUESTION 39
You want software that can automatically collect and aggregate log data generated throughout your organization’s infrastructure, analyze it, and send alerts if it detects a deviation from the norm.
Which software must you use?

Security Information Management (SIM)

Security Event Management (SEM)

Security Integration Management (SIM)

Security Information and Event Management (SIEM)

QUESTION 40
Which statements are CORRECT about Security Zone policy in OCI ? Select TWO correct answers

Block volume can be moved from a security zone to a standard compartment

Bucket can’t be moved from a security zone to a standard compartment

Resources in a security zone must be accessible from internet

Resources in a security zone must be encrypted using customer-managed keys

QUESTION 41
VCN Flow log record details about the traffic that has been denied or approved is based on which of the following statements?

Configuration of route table

Security Lists or Network Security Group Rules

Web Application Firewall (WAF)

Auth tokens

QUESTION 42
Which Security Zone policy is NOT valid?

A boot volume can be moved from a security zone to a standard compartment.

A compute instance cannot be moved from a security zone to a standard compartment.

Resources in a security zone should not be accessible from the public internet.

Resources in a security zone must be automatically backed up regularly.

QUESTION 43
which three resources are required to encrypt a block volume with the customer managed key?

MAXIMUM SECURITY ZONE

SYMMETRIC MASTER KEY ENCRYPTlON KEY

BLOCK KEY

OCI VAIRT

IAM Policy Allowing Block Storage to Use Keys

Secrets

https://docs.oracle.com/en-us/iaas/Content/SecurityAdvisor/Tasks/creatingsecureblockvolume.htm

QUESTION 44
Which of the following is necessary step when creating a secret in vault?

Vault-managed key is necessary to encrypt the secret

Digest Hash should be created of the secret value

Object Storage must be created to run secret service

Shamir’s secret sharing algorithm should be used to unseal the vault

https://docs.oracle.com/en/database/other-databases/essbase/21/essad/create-vault-and-secrets.html

QUESTION 45
Which resources can be used to create and manage from Vault Service ? Select TWO correct answers

Secret

IAM

Keys

Cloud Guard

QUESTION 46
With regard to WAF in OCI, which of the following statements are NOT customer’s responsibility? Select TWO answers.

Configure WAF policies for websites

WAF edge nodes with High Availability

Configure Bot Management strategies for a website traffic

Import latest OWASP Core Rule Sets

QUESTION 47
You create a new compartment, “apps,” to host some production apps and you create an apps_group and added users to it.
What would you do to ensure the users have access to the apps compartment?

Add an IAM policy for the individual users to access the apps compartment.

Add an IAM policy for apps_group granting access to the apps compartment.

Add an lAM policy to attach tenancy to the apps group.

No action is required.

QUESTION 48
For how long are API calls audited and available?

30 days

90 days

365 days

60 days

QUESTION 49
What is the minimum active storage duration for logs used by Logging Analytics to be archived?

60 days

10 days

30 days

15 days

https://docs.oracle.com/en-us/iaas/logging-analytics/doc/manage-storage.html#:~:text=The%20minimum%20Active%20Storage%20Duration,be%20archived%20is%2030%20days.
The minimum Active Storage Duration (Days) for logs before they can be archived is 30 days.

QUESTION 50
Which statements are CORRECT about Multi-Factor Authentication in OCI ? Select TWO correct answers

Members of the Administrators group can disable MFA for other users

Users cannot enable MFA for themselves

A user can register multiple devices to use for MFA.

Members of the Administrators group cannot enable MFA for another user

QUESTION 51
What must be configured for a load balancer to accept incoming traffic?

Service Gateway

SSL certificate

Listener

Route table entry pointing to the listener IP address

A listener is an entity that checks for connection requests. The load balancer listener listens for ingress client traffic using the port you specify within the listener and the load balancer’s public IP.
https://docs.oracle.com/en-us/iaas/Content/GSG/Tasks/loadbalancing.htm
To create a listener:
On your Load Balancer Details page, click Listeners.
Click Create Listener.
Enter the following:
Name: Enter a friendly name. Avoid entering confidential information.
Protocol: Select HTTP.
Port: Enter 80 as the port on which to listen for incoming traffic.
Backend Set: Select the backend set you created.
Click Create.

QUESTION 52
A member of operations team has set Pre-Authenticated Request (PAR) associated with a bucket to an incorrect date and now wants to edit the PAR request. How can this be achieved?

Don’t set an expiration time for PAR

Delete the bucket associated with PAR and recreate it

Delete the PAR and recreate it with the required date

Delete both PAR as well as the bucket then recreate both

QUESTION 53
An automobile company needs to configure Bastion Managed SSH session to a compute instance in a private subnet. What are the TWO prerequisites to configure successfully?

NAT or Service Gateway should be attached to the private subnet

There is no need for any gateway in private subnet

SSH port forwarding should be enabled

Route rule to a NAT or Service Gateway should be associated with the subnet of the route table

QUESTION 54
What would you use to make Oracle Cloud Infrastructure Identity and Access Management govern resources in a tenancy?

Policies

Users

Dynamic groups

Groups

POLICY
A document that specifies who can access which resources, and how. Access is granted at the group and compartment level, which means you can write a policy that gives a group a specific type of access within a specific compartment, or to the tenancy itself. If you give a group access to the tenancy, the group automatically gets the same type of access to all the compartments inside the tenancy. For more information, see Example Scenario and How Policies Work. The word “policy” is used by people in different ways: to mean an individual statement written in the policy language; to mean a collection of statements in a single, named “policy” document (which has an Oracle Cloud ID (OCID) assigned to it); and to mean the overall body of policies your organization uses to control access to resources.
https://docs.oracle.com/en-us/iaas/Content/Identity/Concepts/overview.htm

Loading …