[Jun 30, 2022] Latest Oracle 1Z0-1104-21 Exam Practice Test To Gain Brilliante Result [Q38-Q53]

4.5/5 - (2 votes)

Latest [Jun 30, 2022] Oracle 1Z0-1104-21 Exam Practice Test To Gain Brilliante Result

Take a Leap Forward in Your Career by Earning Oracle 1Z0-1104-21

Oracle 1z0-1104-21 Exam Syllabus Topics:

Topic	Details
Topic 1	Design a scalable authorization model with users, groups, and policies Implement conditional and advanced policies
Topic 2	Describe key capabilities provided by Data Safe Describe use case for auditing and review OCI Audit Logs
Topic 3	Implement security monitoring and alerting Secure connectivity of virtual networks (DRG v2, Peering)
Topic 4	Create and configure Web Application Firewall Configure Network Security Groups (NSGs) and Security Lists
Topic 5	Understand and implement Security Zones and Security Advisor Identify the Cloud Security use cases, challenges, and trends
Topic 6	Configure and manage Secrets in OCI Vault Secure connectivity of hybrid networks (Site-to-Site VPN, FastConnect)
Topic 7	Configure security for Oracle Autonomous Database and DB Systems Configure security for OKE and Oracle Functions

NEW QUESTION 38
Which Oracle Cloud Service provides restricted access to target resources?

Bastion

Internet Gateway

Load balancer

SSL certificate

Bastion
Oracle Cloud Infrastructure Bastion provides restricted and time-limited access to target resources that don’t have public endpoints.

https://docs.oracle.com/en-us/iaas/Content/Security/Concepts/security_features.htm

NEW QUESTION 39
which three resources are required to encrypt a block volume with the customer managed key?

MAXIMUM SECURITY ZONE

SYMMETRIC MASTER KEY ENCRYPTlON KEY

BLOCK KEY

OCI VAIRT

IAM Policy Allowing Block Storage to Use Keys

Secrets

https://docs.oracle.com/en-us/iaas/Content/SecurityAdvisor/Tasks/creatingsecureblockvolume.htm

NEW QUESTION 40
For how long are API calls audited and available?

30 days

90 days

365 days

60 days

NEW QUESTION 41
As a solutions architect, you need to assist operations team to write an I AM policy to give users in group-uat1 and group- uat2 access to manage all resources in the compartment Uat. Which is the CORRECT IAM policy ?

Allow any-user to manage all resources in tenancy where target.compartment= Uat

Allow any-user to manage all resources in compartment Uat where request.group=/group-uat/*

Allow group /group-uat*/ to manage all resources in compartment Uat

Allow group group-uat1 group-uat2 to manage all resources in compartment Uat

NEW QUESTION 42
What must be configured for a load balancer to accept incoming traffic?

Service Gateway

SSL certificate

Listener

Route table entry pointing to the listener IP address

A listener is an entity that checks for connection requests. The load balancer listener listens for ingress client traffic using the port you specify within the listener and the load balancer’s public IP.
https://docs.oracle.com/en-us/iaas/Content/GSG/Tasks/loadbalancing.htm
To create a listener:
On your Load Balancer Details page, click Listeners.
Click Create Listener.
Enter the following:
Name: Enter a friendly name. Avoid entering confidential information.
Protocol: Select HTTP.
Port: Enter 80 as the port on which to listen for incoming traffic.
Backend Set: Select the backend set you created.
Click Create.

NEW QUESTION 43
What is the minimum active storage duration for logs used by Logging Analytics to be archived?

60 days

10 days

30 days

15 days

https://docs.oracle.com/en-us/iaas/logging-analytics/doc/manage-storage.html#:~:text=The%20minimum%20Active%20Storage%20Duration,be%20archived%20is%2030%20days.
The minimum Active Storage Duration (Days) for logs before they can be archived is 30 days.

NEW QUESTION 44
your company has hired a consulting firm to audit your oracle cloud infrastructure activity and configuration you have created a set of users who will be performing the audit, you assigned these user to the orgauditgrp group. the auditor required the ability to see the configuration of all resources within tenant and you have agreed to exempt the dev compartment from the audit.
which IAM policy should be created to grant the orgauditgrp the ability to look at configuration for all resources except for those resources inside the dev compartment?

allow group orgauditgrp to read all-resources in tenancy where target.compartment.name !=dev

allow group orgauditgrp to read all-resources in compartment !=dev

allow group orgauditgrp to inspect all-resources in tenancy where target compartment.name !=dev

allow group orgauditgrp to inspect all-resources in compartment !=dev

NEW QUESTION 45
You subscribe to a PaaS service that follows the Shared Responsibility model.
Which type of security is your responsibility?

Network

Infrastructure

Data

Guest OS

https://www.oracle.com/a/ocom/docs/cloud/oracle-ctr-2020-shared-responsibility.pdf

NEW QUESTION 46
Which of the following is necessary step when creating a secret in vault?

Vault-managed key is necessary to encrypt the secret

Digest Hash should be created of the secret value

Object Storage must be created to run secret service

Shamir’s secret sharing algorithm should be used to unseal the vault

https://docs.oracle.com/en/database/other-databases/essbase/21/essad/create-vault-and-secrets.html

NEW QUESTION 47
As a security administrator, you found out that there are users outside your co network who are accessing OCI Object Storage Bucket. How can you prevent these users from accessing OCI resources in corporate network?

Create an 1AM policy and create WAF rules

Create an 1AM policy and add a network source

Make OCI resources private instead of public

Create PAR to restrict access the access

NEW QUESTION 48
Which component helps move logging data to other services, such as archiving log data in object storage?

Agent Configuration

Unified Monitoring Agent

Service Connector Hub

Service Log Category

Service Connector Hub
Service Connector Hub moves logging data to other services in Oracle Cloud Infrastructure. For example, use Service Connector Hub to alarm on log data, send log data to databases, and archive log data to Object Storage. For more information, see Service Connector Hub.
https://docs.oracle.com/en-us/iaas/Content/Logging/Concepts/loggingoverview.htm

NEW QUESTION 49
You are using a custom application with third-party APIs to manage application and data hosted in an Oracle Cloud Infrastructure (OCI) tenancy. Although your third-party APIs don’t support OCI’s signature-based authentication, you want them to communicate with OCI resources. Which authentication option must you use to ensure this?

OCI username and Password

API Signing Key

SSH Key Pair with 2048-bit algorithm

Auth Token

NEW QUESTION 50
On which option do you set Oracle Cloud Infrastructure Budget?

Compartments

Instances

Free-form tags

Tenancy

How Budgets Work
Budgets are set on cost-tracking tags or on compartments (including the root compartment) to track all spending in that cost-tracking tag or for that compartment and its children.
https://docs.oracle.com/en-us/iaas/Content/Billing/Concepts/budgetsoverview.htm

NEW QUESTION 51
You want to make API calls against other OCI services from your instance without configuring user credentials. How would you achieve this?

Create a dynamic group and add a policy.

Create a dynamic group and add your instance.

Create a group and add a policy.

No configuration is required for making API calls.

DYNAMIC GROUP
Dynamic groups allow you to group Oracle Cloud Infrastructure instances as principal actors, similar to user groups. You can then create policies to permit instances in these groups to make API calls against Oracle Cloud Infrastructure services. Membership in the group is determined by a set of criteria you define, called matching rules. https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/callingservicesfrominstances.htm

NEW QUESTION 52
Logical isolation for resources is provided by which OCI feature?

Tenancy

Availability Zone

Region

Compartments

NEW QUESTION 53
Which resources can be used to create and manage from Vault Service ? Select TWO correct answers

Secret

IAM

Keys

Cloud Guard