1z0-1104-21 by Oracle Actual Free Exam Q&As

Question 1

As a security administrator, you found out that there are users outside your co network who are accessing OCI Object Storage Bucket. How can you prevent these users from accessing OCI resources in corporate network?

A. Create an 1AM policy and add a network source B. Make OCI resources private instead of public C. Create PAR to restrict access the access D. Create an 1AM policy and create WAF rules

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 2

What does the following identity policy do?
Allow group my-group to use fn-invocation in compartment ABC where target.function.id = '<function-OCID>'

A. Enables users in a group to create, update, and delete ALL applications and functions in a compartment B. Enables users to invoke all the functions in a compartment except for one specific function C. Enables users to invoke all the functions in a specific application D. Enables users to invoke just one specific function

Discussion 0

Correct Answer: D Vote an answer

Question 3

A company needs to have some buckets as public in the compartment. You want Cloud Guard to ignore the problem associated with public bucket. Select TWO correct answers

A. Configure Conditional groups for the detector to fix base line B. First make the bucket private and after few days make the bucket public again C. Make the bucket private so that Cloud Guard won't detect it D. Dismiss the issues associated with these resources

Discussion 0

Correct Answer: A,D Vote an answer

Question 4

You are using a custom application with third-party APIs to manage application and data hosted in an Oracle Cloud Infrastructure (OCI) tenancy. Although your third-party APIs don't support OCI's signature-based authentication, you want them to communicate with OCI resources. Which authentication option must you use to ensure this?

A. API Signing Key B. Auth Token C. SSH Key Pair with 2048-bit algorithm D. OCI username and Password

Discussion 0

Correct Answer: B Vote an answer

Question 5

Which OCI service can index, enrich, aggregate, explore, search, analyze, correlate, visualize and monitor data?

A. Data Guard B. Logging Analytics C. Data Safe D. WAF

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 6

Where is sensitive configuration data (like certificates, and credentials) is stored by Kubernetes cluster control plane?

A. Boot Volume B. ETCD C. Block Volume D. Oracle Functions

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 7

What are the security recommendations and best practices for Oracle Functions?

A. Grant privileges to UID and GID 1000, such that the functions running within a container acquire the default root capabilities. B. Define a policy statement that enables access to functions for requests coming from multiple IP addresses. C. Ensure that functions in a VCN have restricted access to resources and services. D. Add applications to network security groups for fine-grained ingress/egress rules.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 8

An e-commerce company needs to authenticate with third-party API that don't support OCI's signature-based authentication.
What can be the solution for the above scenario?

A. Security Token B. Asymmetric keys C. API Key Authentication D. Auth Token/Swift Password

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 9

You want to make API calls against other OCI services from your instance without configuring user credentials. How would you achieve this?

A. Create a group and add a policy. B. No configuration is required for making API calls. C. Create a dynamic group and add your instance. D. Create a dynamic group and add a policy.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 10

Which of the following is necessary step when creating a secret in vault?

A. Object Storage must be created to run secret service B. Shamir's secret sharing algorithm should be used to unseal the vault C. Vault-managed key is necessary to encrypt the secret D. Digest Hash should be created of the secret value

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Oracle Cloud Infrastructure Security 2021 Associate - 1z0-1104-21 Exam Practice Test