1z0-1104-22 Dumps with Free 365 Days Update Fast Exam Updates [Q50-Q66]

Share

1z0-1104-22 Dumps with Free 365 Days Update Fast Exam Updates

Verified 1z0-1104-22 dumps Q&As - 2023 Latest 1z0-1104-22 Download


Oracle 1z0-1104-22 Exam Syllabus Topics:

TopicDetails
Topic 1
  • Identify the Cloud Security use cases, challenges, and trends
  • Design a scalable authorization model with users, groups, and policies
Topic 2
  • Configure Network Security Groups (NSGs) and Security Lists
  • Cloud Security Business Drivers and Challenges
Topic 3
  • Design and implement a logging and logging analytics solution
  • Secure connectivity of hybrid networks (Site-to-Site VPN, FastConnect)
Topic 4
  • Describe the use case for VCN Flow Logs
  • Create and configure Web Application Firewall
Topic 5
  • Configure security for Oracle Autonomous Database and DB Systems
  • Describe the use case for Penetration and Vulnerability Testing
Topic 6
  • Describe key capabilities provided by Data Safe
  • Use Compartments to isolate resources
Topic 7
  • Understand and implement Security Zones and Security Advisor
  • Understand MFA, Identity Federation, and SSO
Topic 8
  • Describe the use case for auditing and review OCI Audit Logs
  • Implement conditional and advanced policies

 

NEW QUESTION 50
Which Cloud Guard component identifies issues with resources or user actions and alerts you when an issue is found?

  • A. Targets
  • B. Problems
  • C. Responders
  • D. Detectors

Answer: D

Explanation:
Detector
Performs checks to identify potential security problems based on activities or configurations. Rules followed to identify problems are the same for all compartments in a target.
https://docs.oracle.com/en-us/iaas/cloud-guard/using/part-start.htm

 

NEW QUESTION 51
Which resources can be used to create and manage from Vault Service ? Select TWO correct answers

  • A. IAM
  • B. Keys
  • C. Cloud Guard
  • D. Secret

Answer: B,D

Explanation:

 

NEW QUESTION 52
Which security issues can be identified by Oracle Vulnerability Scanning Service? Select TWO correct answers

  • A. Distributed Denial of Service (DDoS)
  • B. Ports that are unintentionally left open can be a potential attack vector for cloud resources
  • C. CIS published Industry-standard benchmarks
  • D. SQL Injection

Answer: B,C

Explanation:

 

NEW QUESTION 53
Where are logs stored?

  • A. OCI Block Storage
  • B. OCI Object Storage
  • C. Cloud Agent
  • D. OCI File Storage

Answer: B

Explanation:
You can collect log data continuously from Oracle Cloud Infrastructure (OCI) Object Storage. To enable the log collection, create ObjectCollectionRule resource using REST API or CLI. After the successful creation of this resource and having the required IAM policies, the log collection will be initiated.
https://docs.oracle.com/en-us/iaas/logging-analytics/doc/collect-logs-your-oci-object-storage-bucket.html

 

NEW QUESTION 54
You want to include all instances in any of two or more compartments, which syntax should you use for dynamic policy you want to create for "Prod" compartment and "SIT" compartment?
Prod OCID : 'JON.Prod'
SIT OCID : 'JON.SIT'

  • A. Any { instance.compartment.id = 'JON.Prod', instance.compartment.id = 'JON.SIT'
  • B. Any { instance in compartment 'Prod' and Compartment 'SIT' }
  • C. All { instance in compartment 'Prod' and Compartment 'SIT' }
  • D. All { instance.compartment.id = 'JON.Prod', instance.compartment.id = 'JON.SIT'

Answer: A

Explanation:

 

NEW QUESTION 55
You have configured the Management Agent on an Oracle Cloud Infrastructure (OCI) Linux instance for log ingestion purposes.
Which is a required configuration for OCI Logging Analytics service to collect data from multiple logs of this Instance?

  • A. Log - Log Group Association
  • B. Entity - Log Association
  • C. Log Group - Source Association
  • D. Source - Entity Association

Answer: D

 

NEW QUESTION 56
With regard to OCI Audit Log Service, which of the statement is INCORRECT?

  • A. Retention period for audit events cannot be modified
  • B. REST API calls can be recorded by Audit service
  • C. Audit Events gets collected when modification within objects stored in an Object Storage bucket
  • D. Events logged by the Audit service can be viewed by using the Console, API, or the SDK for Java

Answer: C

 

NEW QUESTION 57
What is the minimum active storage duration for logs used by Logging Analytics to be archived?

  • A. 60 days
  • B. 30 days
  • C. 10 days
  • D. 15 days

Answer: B

Explanation:
https://docs.oracle.com/en-us/iaas/logging-analytics/doc/manage-storage.html#:~:text=The%20minimum%20Active%20Storage%20Duration,be%20archived%20is%2030%20days.
The minimum Active Storage Duration (Days) for logs before they can be archived is 30 days.

 

NEW QUESTION 58
Which statement is true about Oracle Cloud Infrastructure (OCI) Object Storage server-side encryption?

  • A. Customer-provided encryption keys are never stored in OCI Vault service.
  • B. Each object in a bucket is always encrypted with the same data encryption key.
  • C. All the traffic to and from object storage is encrypted by using Transport Layer Security.
  • D. Encryption is not enabled by default.

Answer: C

 

NEW QUESTION 59
What is the configuration to avoid publishing messages during the specified time range known as?

  • A. Statistic
  • B. Resource group
  • C. Suppression
  • D. Trigger rule

Answer: C

Explanation:

 

NEW QUESTION 60
A company has OCI tenancy which has mount target associated with two File Systems, CG_1 and CG_2. These File Systems are accessed by IP-based clients AB_1 and AB_2 respectively. As a security administrator, how can you provide access to both clients such that CGI has Read only access on AB1 and CG_2 has Read/Write access on AB_2?

  • A. Access Control Lists
  • B. Vault
  • C. NFS Export Option
  • D. NFS v3 Unix Security

Answer: C,D

Explanation:

 

NEW QUESTION 61
What does an audit log event include?

  • A. Audit type
  • B. Footer
  • C. Header
  • D. Type of input

Answer: C

Explanation:
The HTTP header fields and values in the request.
https://docs.oracle.com/en-us/iaas/Content/Audit/Reference/logeventreference.htm

 

NEW QUESTION 62
Which statement is true about standards?

  • A. They may be audited.
  • B. They are the foundation of corporate governance.
  • C. They are result of a regulation or contractual requirement or an industry requirement.
  • D. They are methods and instructions on how to maintain or accomplish the directives of the policy.

Answer: C

 

NEW QUESTION 63
What are the security recommendations and best practices for Oracle Functions?

  • A. Define a policy statement that enables access to functions for requests coming from multiple IP addresses.
  • B. Ensure that functions in a VCN have restricted access to resources and services.
  • C. Grant privileges to UID and GID 1000, such that the functions running within a container acquire the default root capabilities.
  • D. Add applications to network security groups for fine-grained ingress/egress rules.

Answer: D

Explanation:
https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/securitylists.htm

 

NEW QUESTION 64
Which WAF service component must be configured to allow, block, or log network requests when they meet specified criteria?

  • A. Web Application Firewall policy
  • B. Protection rules
  • C. Origin
  • D. Bot Management

Answer: B

Explanation:
Protection rules
Protection rules can be configured to either allow, block, or log network requests when they meet the specified criteria of a protection rule. The WAF will observe traffic to your web application over time and suggest new rules to apply.
https://www.oracle.com/security/cloud-security/what-is-waf/

 

NEW QUESTION 65
How can you convert a fixed load balancer to a flexible load balancer?

  • A. Using the Edit Listener option.
  • B. Use Update Shape workflows.
  • C. Delete the fixed load balancer and create a new one.
  • D. There is no way to covert the load balancer.

Answer: B

 

NEW QUESTION 66
......

Updated Oracle Study Guide 1z0-1104-22 Dumps Questions: https://www.trainingquiz.com/1z0-1104-22-practice-quiz.html

Dumps Questions [2023] Pass for 1z0-1104-22 Exam: https://drive.google.com/open?id=1aFhzrpro_k7fg3Xe1tthgXwygL_H7yBD