Achive your Success with Latest Oracle 1z0-1104-21 Exam [Sep 12, 2022]
The 1z0-1104-21 Exam Test For Brief Preparation
NEW QUESTION 48
You want software that can automatically collect and aggregate log data generated throughout your organization's infrastructure, analyze it, and send alerts if it detects a deviation from the norm.
Which software must you use?
- A. Security Integration Management (SIM)
- B. Security Information and Event Management (SIEM)
- C. Security Event Management (SEM)
- D. Security Information Management (SIM)
Answer: B
NEW QUESTION 49
What do the features of OS Management Service do?
- A. Provide paid service and support to OCI subscribers for fixes on priority.
- B. Add complexity in using multiple tools to manage mixed-OS environments.
- C. Increase security and reliability by regular bug fixes.
- D. Encourage manual setup to avoid machine-induced errors.
Answer: C
Explanation:
https://docs.oracle.com/en/solutions/oci-best-practices/manage-your-operating-systems1.html
NEW QUESTION 50
Bot Management in OCI provides which of the features? Select TWO correct answers.
- A. Bad Bot Denylist
- B. CAPTCHA Challenge
- C. Good Bot Allowlist
- D. IP Prefix Steering
Answer: B,C
Explanation:
NEW QUESTION 51
What does the following identity policy do?
Allow group my-group to use fn-invocation in compartment ABC where target.function.id = '<function-OCID>'
- A. Enables users to invoke all the functions in a compartment except for one specific function
- B. Enables users to invoke just one specific function
- C. Enables users to invoke all the functions in a specific application
- D. Enables users in a group to create, update, and delete ALL applications and functions in a compartment
Answer: B
NEW QUESTION 52
Which statements are CORRECT about Multi-Factor Authentication in OCI ? Select TWO correct answers
- A. Members of the Administrators group can disable MFA for other users
- B. A user can register multiple devices to use for MFA.
- C. Members of the Administrators group cannot enable MFA for another user
- D. Users cannot enable MFA for themselves
Answer: A,C
Explanation:
NEW QUESTION 53
How can you convert a fixed load balancer to a flexible load balancer?
- A. Use Update Shape workflows.
- B. Using the Edit Listener option.
- C. There is no way to covert the load balancer.
- D. Delete the fixed load balancer and create a new one.
Answer: A
NEW QUESTION 54
What would you use to make Oracle Cloud Infrastructure Identity and Access Management govern resources in a tenancy?
- A. Users
- B. Policies
- C. Dynamic groups
- D. Groups
Answer: B
NEW QUESTION 55
You create a new compartment, "apps," to host some production apps and you create an apps_group and added users to it.
What would you do to ensure the users have access to the apps compartment?
- A. Add an IAM policy for the individual users to access the apps compartment.
- B. No action is required.
- C. Add an IAM policy for apps_group granting access to the apps compartment.
- D. Add an lAM policy to attach tenancy to the apps group.
Answer: C
NEW QUESTION 56
Which OCI services can encrypt all data-at-rest ? Select TWO correct answers
- A. Block Volumes
- B. File Storage
- C. NAT Gateway
- D. Geolocation Steering
Answer: A,B
Explanation:
NEW QUESTION 57
You are using a custom application with third-party APIs to manage application and data hosted in an Oracle Cloud Infrastructure (OCI) tenancy. Although your third-party APIs don't support OCI's signature-based authentication, you want them to communicate with OCI resources. Which authentication option must you use to ensure this?
- A. Auth Token
- B. OCI username and Password
- C. SSH Key Pair with 2048-bit algorithm
- D. API Signing Key
Answer: A
NEW QUESTION 58
Oracle Object Storage achieves data durability by which of the mechanisms ? Select TWO correct answers
- A. Object Versioning
- B. Redundant Array of Independent Disks
- C. Service Gateway
- D. Redundant Storage across availability domains
Answer: A,D
Explanation:
NEW QUESTION 59
Which of these protects customer data at rest and in transit in a way that allows customers to meet their security and compliance requirements for cryptographic algorithms and key management?
- A. Customer isolation
- B. Security controls
- C. Data encryption
- D. Identity Federation
Answer: C
Explanation:
DATA ENCRYPTION
Protect customer data at-rest and in-transit in a way that allows customers to meet their security and compliance requirements for cryptographic algorithms and key management.
https://docs.oracle.com/en-us/iaas/Content/Security/Concepts/security_overview.htm
NEW QUESTION 60
What must be configured for a load balancer to accept incoming traffic?
- A. Listener
- B. SSL certificate
- C. Service Gateway
- D. Route table entry pointing to the listener IP address
Answer: A
Explanation:
A listener is an entity that checks for connection requests. The load balancer listener listens for ingress client traffic using the port you specify within the listener and the load balancer's public IP.
https://docs.oracle.com/en-us/iaas/Content/GSG/Tasks/loadbalancing.htm
To create a listener:
On your Load Balancer Details page, click Listeners.
Click Create Listener.
Enter the following:
Name: Enter a friendly name. Avoid entering confidential information.
Protocol: Select HTTP.
Port: Enter 80 as the port on which to listen for incoming traffic.
Backend Set: Select the backend set you created.
Click Create.
NEW QUESTION 61
For how long are API calls audited and available?
- A. 30 days
- B. 90 days
- C. 60 days
- D. 365 days
Answer: B
NEW QUESTION 62
What are the security recommendations and best practices for Oracle Functions?
- A. Add applications to network security groups for fine-grained ingress/egress rules.
- B. Ensure that functions in a VCN have restricted access to resources and services.
- C. Define a policy statement that enables access to functions for requests coming from multiple IP addresses.
- D. Grant privileges to UID and GID 1000, such that the functions running within a container acquire the default root capabilities.
Answer: A
Explanation:
https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/securitylists.htm
NEW QUESTION 63
Which OCI service can index, enrich, aggregate, explore, search, analyze, correlate, visualize and monitor data?
- A. Data Safe
- B. Logging Analytics
- C. Data Guard
- D. WAF
Answer: B
Explanation:
NEW QUESTION 64
Which statement is true about standards?
- A. They may be audited.
- B. They are the foundation of corporate governance.
- C. They are methods and instructions on how to maintain or accomplish the directives of the policy.
- D. They are result of a regulation or contractual requirement or an industry requirement.
Answer: D
NEW QUESTION 65
On which option do you set Oracle Cloud Infrastructure Budget?
- A. Instances
- B. Compartments
- C. Free-form tags
- D. Tenancy
Answer: B
Explanation:
How Budgets Work
Budgets are set on cost-tracking tags or on compartments (including the root compartment) to track all spending in that cost-tracking tag or for that compartment and its children.
https://docs.oracle.com/en-us/iaas/Content/Billing/Concepts/budgetsoverview.htm
NEW QUESTION 66
When does Cloud Guard re-open an issue and update the history?
- A. If it detects an issue for a previously dismissed configuration problem
- B. If it detects an issue for a previously resolved/dismissed activity problem
- C. If it detects an issue again for an Open (unresolved) problem
- D. If it detects an issue for a previously resolved configuration problem
Answer: D
Explanation:
If Cloud Guard detects an issue again for:
An Open (unresolved) problem, it updates the problem history, but doesn't create a new problem.
A previously solved problem, it reopens the issue and updates the history.
A previously dismissed problem, it updates the history.
https://docs.oracle.com/en-us/iaas/cloud-guard/using/problems-page.htm
NEW QUESTION 67
As a Security Admin you want to inspect the metadata and actual data in your Oracle databases to discover sensitive data and provide comprehensive results listing the sensitive columns and related information. Which Data Safe feature will help you to achieve the above requirement ?
- A. Data Discovery
- B. Security Assessment
- C. Data Masking
- D. User Assessment
Answer: A
Explanation:
NEW QUESTION 68
Which volume type contains the image used to boot a compute instance?
- A. Block volume
- B. Startup volume
- C. Init 6 volume
- D. Boot volume
Answer: D
Explanation:
Boot Volumes
When you launch a virtual machine (VM) or bare metal instance based on a platform image or custom image, a new boot volume for the instance is created in the same compartment. That boot volume is associated with that instance until you terminate the instance. When you terminate the instance, you can preserve the boot volume and its data
https://docs.oracle.com/en-us/iaas/Content/Block/Concepts/bootvolumes.htm
NEW QUESTION 69
What is the configuration to avoid publishing messages during the specified time range known as?
- A. Trigger rule
- B. Resource group
- C. Statistic
- D. Suppression
Answer: D
Explanation:
NEW QUESTION 70
Which statement is true about origin management in WAF?
Statement A: Multiple origins can be defined.
Statement B: Only a single origin can be active for a WAF.
- A. Only statement B is true.
- B. Both the statements are false.
- C. Only statement A is true.
- D. Both the statements are true.
Answer: D
NEW QUESTION 71
Which statement is not true about Cloud Security Posture?
- A. Problems are defined by the type of detector that creates them: activity or configuration.
- B. Problems can be resolved, dismissed, or remediated.
- C. Problems contain data about the specific type of issue that was found.
- D. Problems are created when Cloud Guard discovers a deviation from a responder rule.
Answer: D
Explanation:
https://www.oracle.com/security/cloud-security/what-is-cspm/
NEW QUESTION 72
You subscribe to a PaaS service that follows the Shared Responsibility model.
Which type of security is your responsibility?
- A. Guest OS
- B. Data
- C. Network
- D. Infrastructure
Answer: B
Explanation:
https://www.oracle.com/a/ocom/docs/cloud/oracle-ctr-2020-shared-responsibility.pdf
NEW QUESTION 73
......
Oracle 1z0-1104-21 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
Revolutionary Guide To Exam Oracle Dumps: https://actualtests.vceengine.com/1z0-1104-21-vce-test-engine.html
