Latest [Oct 29, 2022] Real Oracle 1z0-1104-21 Exam Dumps Questions [Q34-Q48]

Rate this post

Latest [Oct 29, 2022] Real Oracle 1z0-1104-21 Exam Dumps Questions

1z0-1104-21 Dumps To Pass Oracle Cloud Infrastructure Exam in One Day (Updated 96 Questions)

QUESTION 34
Which of the following services are NOT Security Services in OCI ? Select TWO answers.

Data Guard

Cloud Guard

Vault

Block Volume

QUESTION 35
You want software that can automatically collect and aggregate log data generated throughout your organization’s infrastructure, analyze it, and send alerts if it detects a deviation from the norm.
Which software must you use?

Security Information Management (SIM)

Security Event Management (SEM)

Security Integration Management (SIM)

Security Information and Event Management (SIEM)

QUESTION 36
Which statement is true about standards?

They may be audited.

They are result of a regulation or contractual requirement or an industry requirement.

They are methods and instructions on how to maintain or accomplish the directives of the policy.

They are the foundation of corporate governance.

QUESTION 37
You have configured the Management Agent on an Oracle Cloud Infrastructure (OCI) Linux instance for log ingestion purposes.
Which is a required configuration for OCI Logging Analytics service to collect data from multiple logs of this Instance?

Log – Log Group Association

Entity – Log Association

Source – Entity Association

Log Group – Source Association

QUESTION 38
As a security architect, how can you prevent unwanted bots while desirable bots are allowed to enter?

Data Guard

Vault

Compartments

Web Application Firewall (WAF)

QUESTION 39
What does the following identity policy do?
Allow group my-group to use fn-invocation in compartment ABC where target.function.id = ‘<function-OCID>’

Enables users in a group to create, update, and delete ALL applications and functions in a compartment

Enables users to invoke all the functions in a specific application

Enables users to invoke just one specific function

Enables users to invoke all the functions in a compartment except for one specific function

QUESTION 40
What would you use to make Oracle Cloud Infrastructure Identity and Access Management govern resources in a tenancy?

Policies

Users

Dynamic groups

Groups

POLICY
A document that specifies who can access which resources, and how. Access is granted at the group and compartment level, which means you can write a policy that gives a group a specific type of access within a specific compartment, or to the tenancy itself. If you give a group access to the tenancy, the group automatically gets the same type of access to all the compartments inside the tenancy. For more information, see Example Scenario and How Policies Work. The word “policy” is used by people in different ways: to mean an individual statement written in the policy language; to mean a collection of statements in a single, named “policy” document (which has an Oracle Cloud ID (OCID) assigned to it); and to mean the overall body of policies your organization uses to control access to resources.
https://docs.oracle.com/en-us/iaas/Content/Identity/Concepts/overview.htm

QUESTION 41
For how long are API calls audited and available?

30 days

90 days

365 days

60 days

QUESTION 42
Which WAF service component must be configured to allow, block, or log network requests when they meet specified criteria?

Protection rules

Bot Management

Origin

Web Application Firewall policy

Protection rules
Protection rules can be configured to either allow, block, or log network requests when they meet the specified criteria of a protection rule. The WAF will observe traffic to your web application over time and suggest new rules to apply.
https://www.oracle.com/security/cloud-security/what-is-waf/

QUESTION 43
How can you convert a fixed load balancer to a flexible load balancer?

There is no way to covert the load balancer.

Use Update Shape workflows.

Delete the fixed load balancer and create a new one.

Using the Edit Listener option.

QUESTION 44
With regard to WAF in OCI, which of the following statements are NOT customer’s responsibility? Select TWO answers.

Configure WAF policies for websites

WAF edge nodes with High Availability

Configure Bot Management strategies for a website traffic

Import latest OWASP Core Rule Sets

QUESTION 45
Which Security Zone policy is NOT valid?

A boot volume can be moved from a security zone to a standard compartment.

A compute instance cannot be moved from a security zone to a standard compartment.

Resources in a security zone should not be accessible from the public internet.

Resources in a security zone must be automatically backed up regularly.

QUESTION 46
Which cache rules criterion matches if the concatenation of the requested URL path and query are identical to the contents of the value field?

URL_PART_CONTAINS

URL_IS

URL_PART_ENDS_WITH

URL_STARTS_WITH

URL_IS: Matches if the concatenation of request URL path and query is identical to the contents of the value field. URL must start with a /.
https://docs.oracle.com/en-us/iaas/tools/terraform-provider-oci/4.57.0/docs/d/waas_waas_policy.html

QUESTION 47
your company has hired a consulting firm to audit your oracle cloud infrastructure activity and configuration you have created a set of users who will be performing the audit, you assigned these user to the orgauditgrp group. the auditor required the ability to see the configuration of all resources within tenant and you have agreed to exempt the dev compartment from the audit.
which IAM policy should be created to grant the orgauditgrp the ability to look at configuration for all resources except for those resources inside the dev compartment?

allow group orgauditgrp to read all-resources in tenancy where target.compartment.name !=dev

allow group orgauditgrp to read all-resources in compartment !=dev

allow group orgauditgrp to inspect all-resources in tenancy where target compartment.name !=dev

allow group orgauditgrp to inspect all-resources in compartment !=dev

QUESTION 48
Which is NOT a compliance document?

Certificate

Penetration test report

Attestation

Bridge letter

Types of Compliance Documents
When viewing compliance documents, you can filter on the following types:
Attestation. A Payment Card Industry (PCI) Data Security Standard (DSS) Attestation of Compliance document.
Audit. A general audit report.
Bridge Letter (BridgeLetter). A bridge letter. Bridge letters provide compliance information for the period of time between the end date of an SOC report and the date of the release of a new SOC report.
Certificate. A document indicating certification by a particular authority, with regard to certification requirements and examination results conforming to said requirements.
SOC3. A Service Organization Controls 3 audit report that provides information relating to a service organization’s internal controls for security, availability, confidentiality, and privacy.
Other. A compliance document that doesn’t fit into any of the preceding, more specific categories.
https://docs.oracle.com/en-us/iaas/Content/ComplianceDocuments/Concepts/compliancedocsoverview.htm

Loading …

Oracle 1z0-1104-21 Exam Syllabus Topics:

Topic	Details
Topic 1	Design a scalable authorization model with users, groups, and policies Implement conditional and advanced policies
Topic 2	Create and configure Web Application Firewall Configure Network Security Groups (NSGs) and Security Lists
Topic 3	Configure and manage Secrets in OCI Vault Secure connectivity of hybrid networks (Site-to-Site VPN, FastConnect)
Topic 4	Implement security monitoring and alerting Secure connectivity of virtual networks (DRG v2, Peering)
Topic 5	Describe OCI Shared Security Responsibility Model Understand MFA, Identity Federation, and SSO
Topic 6	Understand and implement Security Zones and Security Advisor Identify the Cloud Security use cases, challenges, and trends
Topic 7	Describe use case for Penetration and Vulnerability Testing Cloud Security Business Drivers and Challenges
Topic 8	Design and implement a logging and logging analytics solution Configure Dynamic Groups, Network Sources, and Tag-Based Access Control
Topic 9	Describe key capabilities provided by Data Safe Describe use case for auditing and review OCI Audit Logs
Topic 10	Configure security for Oracle Autonomous Database and DB Systems Configure security for OKE and Oracle Functions

1z0-1104-21 Exam Brain Dumps – Study Notes and Theory: https://www.surepassexams.com/1z0-1104-21-exam-bootcamp.html

Oracle 1z0-1104-21 Exam Syllabus Topics:

Leave a Reply Cancel reply