Pass Oracle 1z0-1104-22 exam questions – convert Test Engine to PDF [Q22-Q39]

Rate this post

Pass Oracle 1z0-1104-22 exam questions – convert Test Engine to PDF

Pass Your 1z0-1104-22 Exam Easily – Real 1z0-1104-22 Practice Dump Updated Sep 28, 2023

NEW QUESTION 22
Which OCI services can encrypt all data-at-rest ? Select TWO correct answers

File Storage

NAT Gateway

Block Volumes

Geolocation Steering

NEW QUESTION 23
Logical isolation for resources is provided by which OCI feature?

Tenancy

Availability Zone

Region

Compartments

NEW QUESTION 24
Operations team has made a mistake in updating the secret contents and immediately need to resume using older secret contents in OCI Secret Management within a Vault.
As a Security Administrator, what step should you perform to rollback to last version? Select TWO correct answers.

Mark the secret version as ‘deprecated’

Mark the secret version as ‘Previous’

Mark the secret version as ‘Rewind’

Upload new secret and mark as ‘Pending’. Promote this secret version as ‘Current’

NEW QUESTION 25
Bot Management in OCI provides which of the features? Select TWO correct answers.

Bad Bot Denylist

CAPTCHA Challenge

IP Prefix Steering

Good Bot Allowlist

NEW QUESTION 26
Which Cloud Guard component identifies issues with resources or user actions and alerts you when an issue is found?

Problems

Targets

Detectors

Responders

Detector
Performs checks to identify potential security problems based on activities or configurations. Rules followed to identify problems are the same for all compartments in a target.
https://docs.oracle.com/en-us/iaas/cloud-guard/using/part-start.htm

NEW QUESTION 27
Which IAM policy should be created to give XYZ the ability to list contents of a resource excluding the f needs to authenticate in prod compartment ? Principle of least priviledge should be used.

Allow group XYZ to manage all resources in compartment != prod

Allow group XYZ to use all resources in compartment != prod

Allow group XYZ to inspect all resources in tenancy where target.compartment.name != prod

Allow group XYZ to read all resources in tenancy where target.compartment.name != prod

NEW QUESTION 28
What must be configured for a load balancer to accept incoming traffic?

Service Gateway

SSL certificate

Listener

Route table entry pointing to the listener IP address

A listener is an entity that checks for connection requests. The load balancer listener listens for ingress client traffic using the port you specify within the listener and the load balancer’s public IP.
https://docs.oracle.com/en-us/iaas/Content/GSG/Tasks/loadbalancing.htm
To create a listener:
On your Load Balancer Details page, click Listeners.
Click Create Listener.
Enter the following:
Name: Enter a friendly name. Avoid entering confidential information.
Protocol: Select HTTP.
Port: Enter 80 as the port on which to listen for incoming traffic.
Backend Set: Select the backend set you created.
Click Create.

NEW QUESTION 29
Which of the following services are NOT Security Services in OCI ? Select TWO answers.

Data Guard

Cloud Guard

Vault

Block Volume

NEW QUESTION 30
As a security administrator, you want to create cloud resources that align with Oracle’s security principles and best practices. Which security service should you use?

Identity and Access Management

Cloud Guard

Security Advisor

Web Application Firewall (WAF)

NEW QUESTION 31
Which Oracle Data Safe feature minimizes the amount of personal data and allows internal test, development, and analytics teams to operate with reduced risk?

data auditing

data encryption

security assessment

data masking

data discovery

NEW QUESTION 32
Which type of file system does file storage use?

NFSv3

iSCSI

Paravirtualized

NVMe

SSD

The File Storage service supports the Network File System version 3.0 (NFSv3) protocol. The service supports the Network Lock Manager (NLM) protocol for file locking functionality.
https://docs.oracle.com/en-us/iaas/Content/File/Concepts/filestorageoverview.htm

NEW QUESTION 33
Which components are a part of the OCI Identity and Access Management service?

Policies

Regional subnets

Compute instances

VCN

https://docs.oracle.com/en-us/iaas/Content/Identity/Concepts/overview.htm

NEW QUESTION 34
Which resources can be used to create and manage from Vault Service ? Select TWO correct answers

Secret

IAM

Keys

Cloud Guard

NEW QUESTION 35
A company has OCI tenancy which has mount target associated with two File Systems, CG_1 and CG_2. These File Systems are accessed by IP-based clients AB_1 and AB_2 respectively. As a security administrator, how can you provide access to both clients such that CGI has Read only access on AB1 and CG_2 has Read/Write access on AB_2?

NFS Export Option

Access Control Lists

NFS v3 Unix Security

Vault

NEW QUESTION 36
you want to create a stateless rule for SSH in security list and the ingress role has already been properly configured what combination should you use on the engress role what commination should you use on the egress rule?

select udp for protocol: enter 22 for source port” and all for destination port

select tcp for protocol: enter 22 for source port” and 22 for destination port

select tcp for protocol: enter all for source port” and 22 for destination port.

select tcp for protocol: enter 22 for source port” and all for destination port

NEW QUESTION 37
Which challenge is generally the first level of bot mitigation, but not sufficient with more advanced bot tools?

CAPTCHA challenge

JavaScript challenge

Device fingerprint challenge

Human interaction challenge

NEW QUESTION 38
An e-commerce company needs to authenticate with third-party API that don’t support OCI’s signature-based authentication.
What can be the solution for the above scenario?

Security Token

API Key Authentication

Asymmetric keys

Auth Token/Swift Password

NEW QUESTION 39
Which storage type is most effective when you want to move some unstructured data, consisting of images and videos, to cloud storage?

Standard storage

File storage

Archive storage

Block volume

Use Oracle Cloud Infrastructure Object Storage for data to which you need fast, immediate, and frequent access. Data accessibility and performance justifies a higher price point to store data in the Object Storage tier.
The Object Storage service can store an unlimited amount of unstructured data of any content type, including analytic data and rich content, like images and videos.
https://docs.oracle.com/en/solutions/learn-migrate-app-data-to-cloud/considerations-object-storage.html#GUID-AC192B08-5160-4DA7-B43E-001753D99CF1

Loading …

Oracle 1z0-1104-22 exam covers a wide range of topics related to cloud security, including security controls, network security, identity and access management, data security, and compliance. 1z0-1104-22 exam also covers advanced security topics such as DevOps security, container security, and serverless security. By passing 1z0-1104-22 exam, candidates demonstrate their ability to design, implement, and manage secure Oracle Cloud Infrastructure environments.

Oracle 1z0-1104-22 exam is designed for IT professionals who want to demonstrate their expertise in securing Oracle Cloud Infrastructure. 1z0-1104-22 exam is intended for professionals with a strong understanding of cloud security principles and best practices who want to validate their skills and knowledge in this area.

1z0-1104-22 Real Exam Questions and Answers FREE: https://www.surepassexams.com/1z0-1104-22-exam-bootcamp.html

Leave a Reply Cancel reply