Free 2022 Oracle Cloud Infrastructure 1z0-1104-21 dumps are available by PrepAwayPDF [Q13-Q35]

Rate this post

Free 2022 Oracle Cloud Infrastructure 1z0-1104-21 dumps are available on Google Drive shared by PrepAwayPDF

Welcome to download the newest PrepAwayPDF 1z0-1104-21 PDF dumps: https://www.prepawaypdf.com/Oracle/1z0-1104-21-practice-exam-dumps.html ( 96 Q&As)

Oracle 1z0-1104-21 Exam Syllabus Topics:

Topic	Details
Topic 1	Design a scalable authorization model with users, groups, and policies Implement conditional and advanced policies
Topic 2	Describe use case for Penetration and Vulnerability Testing Cloud Security Business Drivers and Challenges
Topic 3	Describe the use case for VCN Flow Logs Use Compartments to isolate resources
Topic 4	Describe key capabilities provided by Data Safe Describe use case for auditing and review OCI Audit Logs
Topic 5	Create and configure Web Application Firewall Configure Network Security Groups (NSGs) and Security Lists
Topic 6	Implement security monitoring and alerting Secure connectivity of virtual networks (DRG v2, Peering)
Topic 7	Understand and implement Security Zones and Security Advisor Identify the Cloud Security use cases, challenges, and trends

NO.13 Which OCI service can index, enrich, aggregate, explore, search, analyze, correlate, visualize and monitor data?

Data Guard

Data Safe

WAF

Logging Analytics

NO.14 Which challenge is generally the first level of bot mitigation, but not sufficient with more advanced bot tools?

CAPTCHA challenge

JavaScript challenge

Device fingerprint challenge

Human interaction challenge

NO.15 You want to make API calls against other OCI services from your instance without configuring user credentials. How would you achieve this?

Create a dynamic group and add a policy.

Create a dynamic group and add your instance.

Create a group and add a policy.

No configuration is required for making API calls.

DYNAMIC GROUP
Dynamic groups allow you to group Oracle Cloud Infrastructure instances as principal actors, similar to user groups. You can then create policies to permit instances in these groups to make API calls against Oracle Cloud Infrastructure services. Membership in the group is determined by a set of criteria you define, called matching rules. https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/callingservicesfrominstances.htm

NO.16 How can you establish private connectivity over two VCN within same OCI region without traversing the traffic over public internet ?

NAT Gateway

Data Guard

Remote VCN Peering

Local VCN Peering

NO.17 Which type of file system does file storage use?

NFSv3

iSCSI

Paravirtualized

NVMe

SSD

The File Storage service supports the Network File System version 3.0 (NFSv3) protocol. The service supports the Network Lock Manager (NLM) protocol for file locking functionality.
https://docs.oracle.com/en-us/iaas/Content/File/Concepts/filestorageoverview.htm

NO.18 Select the component that encompasses the overall configuration of your WAF service on OCI.

Protection rules

Bot Management

Web Application Firewall policy

Origin

WAF Policy Management
Provides an overview of web application firewall (WAF) policies, including their creation, updating, and deletion.
WAF policies encompass the overall configuration of your WAF service, including access rules, rate limiting rules, and protection rules.
https://docs.oracle.com/en-us/iaas/Content/WAF/Policies/waf-policy_management.htm

NO.19 Which statement is true about Oracle Cloud Infrastructure (OCI) Object Storage server-side encryption?

All the traffic to and from object storage is encrypted by using Transport Layer Security.

Encryption is not enabled by default.

Customer-provided encryption keys are never stored in OCI Vault service.

Each object in a bucket is always encrypted with the same data encryption key.

NO.20 Which Oracle Data Safe feature minimizes the amount of personal data and allows internal test, development, and analytics teams to operate with reduced risk?

data auditing

data encryption

security assessment

data masking

data discovery

NO.21 you are part of security operation of an organization with thousand of your users accessing Oracle cloud infrastructure it was reported that an unknown user action was executed resulting in configuration error you are tasked to quickly identify the details of all users who were active in the last six hours also with any rest API call that were executed. Which oci feature should you use?

service connector hub

management agent log integration

objectcollectionrule

audit analysis dashboard

NO.22 what is the use case for Oracle cloud infrastructure logging analytics service?

monitors, aggregates, indexes and analyzes all log data from on-premises.

labels data packets that pass through the internet gateway

automatically create instances to collect logs analysis and send reports

automatically and manage any log based on a subscription model

Oracle Cloud Infrastructure Logging Analytics is a machine learning-based cloud service that monitors, aggregates, indexes, and analyzes all log data from on-premises and multicloud environments. Enabling users to search, explore, and correlate this data to troubleshoot and resolve problems faster and derive insights to make better operational decisions.
https://www.oracle.com/manageability/logging-analytics/

NO.23 Which Cloud Guard component identifies issues with resources or user actions and alerts you when an issue is found?

Problems

Targets

Detectors

Responders

Detector
Performs checks to identify potential security problems based on activities or configurations. Rules followed to identify problems are the same for all compartments in a target.
https://docs.oracle.com/en-us/iaas/cloud-guard/using/part-start.htm

NO.24 Which of the following services are NOT Security Services in OCI ? Select TWO answers.

Data Guard

Cloud Guard

Vault

Block Volume

NO.25 Which storage type is most effective when you want to move some unstructured data, consisting of images and videos, to cloud storage?

Standard storage

File storage

Archive storage

Block volume

Use Oracle Cloud Infrastructure Object Storage for data to which you need fast, immediate, and frequent access. Data accessibility and performance justifies a higher price point to store data in the Object Storage tier.
The Object Storage service can store an unlimited amount of unstructured data of any content type, including analytic data and rich content, like images and videos.
https://docs.oracle.com/en/solutions/learn-migrate-app-data-to-cloud/considerations-object-storage.html#GUID-AC192B08-5160-4DA7-B43E-001753D99CF1

NO.26 Logical isolation for resources is provided by which OCI feature?

Tenancy

Availability Zone

Region

Compartments

NO.27 An automobile company needs to configure Bastion Managed SSH session to a compute instance in a private subnet. What are the TWO prerequisites to configure successfully?

NAT or Service Gateway should be attached to the private subnet

There is no need for any gateway in private subnet

SSH port forwarding should be enabled

Route rule to a NAT or Service Gateway should be associated with the subnet of the route table

NO.28 When does Cloud Guard re-open an issue and update the history?

If it detects an issue again for an Open (unresolved) problem

If it detects an issue for a previously resolved/dismissed activity problem

If it detects an issue for a previously resolved configuration problem

If it detects an issue for a previously dismissed configuration problem

If Cloud Guard detects an issue again for:
An Open (unresolved) problem, it updates the problem history, but doesn’t create a new problem.
A previously solved problem, it reopens the issue and updates the history.
A previously dismissed problem, it updates the history.
https://docs.oracle.com/en-us/iaas/cloud-guard/using/problems-page.htm

NO.29 What must be configured for a load balancer to accept incoming traffic?

Service Gateway

SSL certificate

Listener

Route table entry pointing to the listener IP address

A listener is an entity that checks for connection requests. The load balancer listener listens for ingress client traffic using the port you specify within the listener and the load balancer’s public IP.
https://docs.oracle.com/en-us/iaas/Content/GSG/Tasks/loadbalancing.htm
To create a listener:
On your Load Balancer Details page, click Listeners.
Click Create Listener.
Enter the following:
Name: Enter a friendly name. Avoid entering confidential information.
Protocol: Select HTTP.
Port: Enter 80 as the port on which to listen for incoming traffic.
Backend Set: Select the backend set you created.
Click Create.

NO.30 As a Security Admin you want to inspect the metadata and actual data in your Oracle databases to discover sensitive data and provide comprehensive results listing the sensitive columns and related information. Which Data Safe feature will help you to achieve the above requirement ?

Data Masking

Data Discovery

Security Assessment

User Assessment

NO.31 Which of these protects customer data at rest and in transit in a way that allows customers to meet their security and compliance requirements for cryptographic algorithms and key management?

Security controls

Customer isolation

Data encryption

Identity Federation

DATA ENCRYPTION
Protect customer data at-rest and in-transit in a way that allows customers to meet their security and compliance requirements for cryptographic algorithms and key management.
https://docs.oracle.com/en-us/iaas/Content/Security/Concepts/security_overview.htm

NO.32 Which tasks can you perform on a dedicated virtual machine host?

Manual scaling

Creating instance pools

Instance configurations

Capacity reservations

Supported features: Most of the Compute features for VM instances are supported for instances running on dedicated virtual machine hosts. However, the following features are not supported:
Autoscaling
Capacity reservations
Instance configurations
Instance pools
Burstable instances
Reboot migration. You can use manual migration instead
https://docs.oracle.com/en-us/iaas/Content/Compute/Concepts/dedicatedvmhosts.htm#Dedicated_Virtual_Machine_Hosts

NO.33 You are using a custom application with third-party APIs to manage application and data hosted in an Oracle Cloud Infrastructure (OCI) tenancy. Although your third-party APIs don’t support OCI’s signature-based authentication, you want them to communicate with OCI resources. Which authentication option must you use to ensure this?

OCI username and Password

API Signing Key

SSH Key Pair with 2048-bit algorithm

Auth Token

NO.34 You want software that can automatically collect and aggregate log data generated throughout your organization’s infrastructure, analyze it, and send alerts if it detects a deviation from the norm.
Which software must you use?

Security Information Management (SIM)

Security Event Management (SEM)

Security Integration Management (SIM)

Security Information and Event Management (SIEM)

NO.35 You have configured the Management Agent on an Oracle Cloud Infrastructure (OCI) Linux instance for log ingestion purposes.
Which is a required configuration for OCI Logging Analytics service to collect data from multiple logs of this Instance?

Log – Log Group Association

Entity – Log Association

Source – Entity Association

Log Group – Source Association

Loading …

Tested Material Used To 1z0-1104-21: https://www.prepawaypdf.com/Oracle/1z0-1104-21-practice-exam-dumps.html

2022 Realistic 1z0-1104-21 Dumps are Available for Instant Access [Q44-Q62]
[May-2022] 1Z0-340-21 Dumps are Available for Instant Access using PrepAwayPDF [Q27-Q45]
Pass Guaranteed Quiz 2022 Realistic Verified Free 1Z0-1046-21 Exam Dumps [Q22-Q45]
Get ready to pass the 1Z0-819 Exam right now using our Oracle Java SE Exam Package [Q20-Q41]

Free 2022 Oracle Cloud Infrastructure 1z0-1104-21 dumps are available by PrepAwayPDF [Q13-Q35]

Oracle 1z0-1104-21 Exam Syllabus Topics:

admin

Leave a Reply Cancel reply

Oracle 1z0-1104-21 Exam Syllabus Topics:

Related posts:

admin

You might also like

Leave a Reply Cancel reply