Download Oracle 1z0-1104-22 Exam Dumps to Pass Exam Easily in 2023
Get 100% Real Free Oracle Cloud Infrastructure 1z0-1104-22 Sample Questions
Oracle 1z0-1104-22 (Oracle Cloud Infrastructure 2022 Security Professional) Exam is designed to test the skills and knowledge of professionals who are responsible for securing the Oracle Cloud Infrastructure. 1z0-1104-22 exam is intended for security professionals, security administrators, network administrators, and other IT professionals who are responsible for maintaining the security of cloud infrastructure.
Oracle 1z0-1104-22 certification exam is designed for professionals who are looking to validate their expertise and knowledge in securing Oracle Cloud Infrastructure. Oracle Cloud Infrastructure 2022 Security Professional certification exam is aimed at professionals who have a deep understanding of the security features and capabilities of Oracle Cloud Infrastructure and have experience in implementing security measures to protect their organization's cloud infrastructure.
NEW QUESTION # 22
Which cache rules criterion matches if the concatenation of the requested URL path and query are identical to the contents of the value field?
- A. URL_PART_CONTAINS
- B. URL_PART_ENDS_WITH
- C. URL_IS
- D. URL_STARTS_WITH
Answer: C
Explanation:
URL_IS: Matches if the concatenation of request URL path and query is identical to the contents of the value field. URL must start with a /.
https://docs.oracle.com/en-us/iaas/tools/terraform-provider-oci/4.57.0/docs/d/waas_waas_policy.html
NEW QUESTION # 23
which three resources are required to encrypt a block volume with the customer managed key?
- A. OCI VAIRT
- B. IAM Policy Allowing Block Storage to Use Keys
- C. BLOCK KEY
- D. MAXIMUM SECURITY ZONE
- E. SYMMETRIC MASTER KEY ENCRYPTlON KEY
- F. Secrets
Answer: A,B,F
Explanation:
https://docs.oracle.com/en-us/iaas/Content/SecurityAdvisor/Tasks/creatingsecureblockvolume.htm
NEW QUESTION # 24
You subscribe to a PaaS service that follows the Shared Responsibility model.
Which type of security is your responsibility?
- A. Data
- B. Guest OS
- C. Infrastructure
- D. Network
Answer: A
Explanation:
https://www.oracle.com/a/ocom/docs/cloud/oracle-ctr-2020-shared-responsibility.pdf
NEW QUESTION # 25
A number of malicious requests for a web application is coming from a set of IP addresses originating from Antartica.
Which of the following statement will help to reduce these types of unauthorized requests ?
- A. List specific set of IP addresses then deny rules in Virtual Cloud Network Security Lists
- B. Use WAF policy using Access Control Rules
- C. Change your home region in which your resources are currently deployed
- D. Delete NAT Gateway from Virtual Cloud Network
Answer: B
NEW QUESTION # 26
Which type of firewalls are designed to protect against web application attacks, such as SQL injection and cross-site scripting?
- A. Packet filtering firewall
- B. Stateful inspection firewall
- C. Incident firewall
- D. Web Application Firewall
Answer: D
Explanation:
SQL injections. Cross-site scripting. Distributed denial of service (DDoS) attacks. Botnets. These are just some of the cyber-weapons increasingly being used by malicious actors to target web applications, cause data breaches, and expose sensitive business information.
Oracle WAF uses a multilayered approach to protect web applications from a host of cyberthreats including malicious bots, application layer (L7) DDoS attacks, cross-site scripting, SQL injection, and vulnerabilities defined by the Open Web Application Security Project (OWASP). When a threat is identified, Oracle WAF automatically blocks it and alerts security operations teams so they can investigate further.
https://www.oracle.com/a/ocom/docs/security/oci-web-application-firewall.pdf
NEW QUESTION # 27
As a security administrator, you found out that there are users outside your co network who are accessing OCI Object Storage Bucket. How can you prevent these users from accessing OCI resources in corporate network?
- A. Create an 1AM policy and create WAF rules
- B. Create an 1AM policy and add a network source
- C. Create PAR to restrict access the access
- D. Make OCI resources private instead of public
Answer: B
Explanation:
NEW QUESTION # 28
A company has OCI tenancy which has mount target associated with two File Systems, CG_1 and CG_2. These File Systems are accessed by IP-based clients AB_1 and AB_2 respectively. As a security administrator, how can you provide access to both clients such that CGI has Read only access on AB1 and CG_2 has Read/Write access on AB_2?
- A. Access Control Lists
- B. Vault
- C. NFS v3 Unix Security
- D. NFS Export Option
Answer: C,D
Explanation:
NEW QUESTION # 29
As a security architect, how can you prevent unwanted bots while desirable bots are allowed to enter?
- A. Vault
- B. Data Guard
- C. Web Application Firewall (WAF)
- D. Compartments
Answer: C
NEW QUESTION # 30
As a solutions architect, you need to assist operations team to write an I AM policy to give users in group-uat1 and group- uat2 access to manage all resources in the compartment Uat. Which is the CORRECT IAM policy ?
- A. Allow group group-uat1 group-uat2 to manage all resources in compartment Uat
- B. Allow group /group-uat*/ to manage all resources in compartment Uat
- C. Allow any-user to manage all resources in tenancy where target.compartment= Uat
- D. Allow any-user to manage all resources in compartment Uat where request.group=/group-uat/*
Answer: A
NEW QUESTION # 31
What is the configuration to avoid publishing messages during the specified time range known as?
- A. Resource group
- B. Statistic
- C. Suppression
- D. Trigger rule
Answer: C
Explanation:
NEW QUESTION # 32
what is the use case for Oracle cloud infrastructure logging analytics service?
- A. monitors, aggregates, indexes and analyzes all log data from on-premises.
- B. automatically create instances to collect logs analysis and send reports
- C. automatically and manage any log based on a subscription model
- D. labels data packets that pass through the internet gateway
Answer: A
Explanation:
Oracle Cloud Infrastructure Logging Analytics is a machine learning-based cloud service that monitors, aggregates, indexes, and analyzes all log data from on-premises and multicloud environments. Enabling users to search, explore, and correlate this data to troubleshoot and resolve problems faster and derive insights to make better operational decisions.
https://www.oracle.com/manageability/logging-analytics/
NEW QUESTION # 33
A company needs to have some buckets as public in the compartment. You want Cloud Guard to ignore the problem associated with public bucket. Select TWO correct answers
- A. Dismiss the issues associated with these resources
- B. Make the bucket private so that Cloud Guard won't detect it
- C. First make the bucket private and after few days make the bucket public again
- D. Configure Conditional groups for the detector to fix base line
Answer: A,D
NEW QUESTION # 34
As a lead Security Architect, you have tasked to restrict access to and from the worker nodes in pods running in Oracle Container Engine for Kubernetes?
- A. Vulnerability Scanning
- B. Security Lists
- C. Identity and Access Management
- D. Cloud Guard
Answer: B
Explanation:
NEW QUESTION # 35
Which statement is true about origin management in WAF?
Statement A: Multiple origins can be defined.
Statement B: Only a single origin can be active for a WAF.
- A. Only statement B is true.
- B. Both the statements are true.
- C. Only statement A is true.
- D. Both the statements are false.
Answer: B
NEW QUESTION # 36
When does Cloud Guard re-open an issue and update the history?
- A. If it detects an issue for a previously resolved configuration problem
- B. If it detects an issue for a previously dismissed configuration problem
- C. If it detects an issue again for an Open (unresolved) problem
- D. If it detects an issue for a previously resolved/dismissed activity problem
Answer: A
Explanation:
If Cloud Guard detects an issue again for:
An Open (unresolved) problem, it updates the problem history, but doesn't create a new problem.
A previously solved problem, it reopens the issue and updates the history.
A previously dismissed problem, it updates the history.
https://docs.oracle.com/en-us/iaas/cloud-guard/using/problems-page.htm
NEW QUESTION # 37
Operations team has made a mistake in updating the secret contents and immediately need to resume using older secret contents in OCI Secret Management within a Vault.
As a Security Administrator, what step should you perform to rollback to last version? Select TWO correct answers.
- A. Mark the secret version as 'Rewind'
- B. Mark the secret version as 'deprecated'
- C. Upload new secret and mark as 'Pending'. Promote this secret version as 'Current'
- D. Mark the secret version as 'Previous'
Answer: C,D
Explanation:
NEW QUESTION # 38
You want to make API calls against other OCI services from your instance without configuring user credentials. How would you achieve this?
- A. Create a dynamic group and add a policy.
- B. No configuration is required for making API calls.
- C. Create a group and add a policy.
- D. Create a dynamic group and add your instance.
Answer: A
Explanation:
DYNAMIC GROUP
Dynamic groups allow you to group Oracle Cloud Infrastructure instances as principal actors, similar to user groups. You can then create policies to permit instances in these groups to make API calls against Oracle Cloud Infrastructure services. Membership in the group is determined by a set of criteria you define, called matching rules. https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/callingservicesfrominstances.htm
NEW QUESTION # 39
......
Oracle 1z0-1104-22 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
1z0-1104-22 Study Guide Realistic Verified Dumps: https://www.passtestking.com/Oracle/1z0-1104-22-practice-exam-dumps.html
Accurate 1z0-1104-22 Questions with Free and Fast Updates: https://drive.google.com/open?id=12nUmKuNDZX_W4v76rzZg19128tkXJZtS