2022 Realistic 1z0-1104-21 Dumps are Available for Instant Access [Q44-Q62]

Rate this post

2022 Realistic 1z0-1104-21 Dumps are Available for Instant Access

Download Exam 1z0-1104-21 Practice Test Questions with 100% Verified Answers

Oracle 1z0-1104-21 Exam Syllabus Topics:

Topic	Details
Topic 1	Describe the use case for VCN Flow Logs Use Compartments to isolate resources
Topic 2	Describe key capabilities provided by Data Safe Describe use case for auditing and review OCI Audit Logs
Topic 3	Configure security for Oracle Autonomous Database and DB Systems Configure security for OKE and Oracle Functions
Topic 4	Design and implement a logging and logging analytics solution Configure Dynamic Groups, Network Sources, and Tag-Based Access Control
Topic 5	Configure and manage Secrets in OCI Vault Secure connectivity of hybrid networks (Site-to-Site VPN, FastConnect)
Topic 6	Describe OCI Shared Security Responsibility Model Understand MFA, Identity Federation, and SSO
Topic 7	Create and configure Web Application Firewall Configure Network Security Groups (NSGs) and Security Lists
Topic 8	Understand and implement Security Zones and Security Advisor Identify the Cloud Security use cases, challenges, and trends
Topic 9	Implement security monitoring and alerting Secure connectivity of virtual networks (DRG v2, Peering)
Topic 10	Describe use case for Penetration and Vulnerability Testing Cloud Security Business Drivers and Challenges

NO.44 Which security issues can be identified by Oracle Vulnerability Scanning Service? Select TWO correct answers

Distributed Denial of Service (DDoS)

Ports that are unintentionally left open can be a potential attack vector for cloud resources

SQL Injection

CIS published Industry-standard benchmarks

NO.45 Which of the following services are NOT Security Services in OCI ? Select TWO answers.

Data Guard

Cloud Guard

Vault

Block Volume

NO.46 Which statement is true about standards?

They may be audited.

They are result of a regulation or contractual requirement or an industry requirement.

They are methods and instructions on how to maintain or accomplish the directives of the policy.

They are the foundation of corporate governance.

NO.47 What do the features of OS Management Service do?

Add complexity in using multiple tools to manage mixed-OS environments.

Provide paid service and support to OCI subscribers for fixes on priority.

Increase security and reliability by regular bug fixes.

Encourage manual setup to avoid machine-induced errors.

https://docs.oracle.com/en/solutions/oci-best-practices/manage-your-operating-systems1.html

NO.48 Which statements are CORRECT about Security Zone policy in OCI ? Select TWO correct answers

Block volume can be moved from a security zone to a standard compartment

Bucket can’t be moved from a security zone to a standard compartment

Resources in a security zone must be accessible from internet

Resources in a security zone must be encrypted using customer-managed keys

NO.49 On which option do you set Oracle Cloud Infrastructure Budget?

Compartments

Instances

Free-form tags

Tenancy

How Budgets Work
Budgets are set on cost-tracking tags or on compartments (including the root compartment) to track all spending in that cost-tracking tag or for that compartment and its children.
https://docs.oracle.com/en-us/iaas/Content/Billing/Concepts/budgetsoverview.htm

NO.50 Which IAM policy should be created to give XYZ the ability to list contents of a resource excluding the f needs to authenticate in prod compartment ? Principle of least priviledge should be used.

Allow group XYZ to manage all resources in compartment != prod

Allow group XYZ to use all resources in compartment != prod

Allow group XYZ to inspect all resources in tenancy where target.compartment.name != prod

Allow group XYZ to read all resources in tenancy where target.compartment.name != prod

NO.51 Which architecture is based on the principle of “never trust, always verify”?

Federated identity

Zero trust

Fluid perimeter

Defense in depth

Enterprise Interest in Zero Trust is Growing Ransomware and breaches are top of the news cycle and a major concern for organizations big and small. So, many are now looking at the Zero Trust architecture and its primary principle “never trust, always verify” to provide greater protection.
According to Report Linker, the Zero Trust security market is projected to grow from USD 15.6 billion in 2019 to USD 38.6 billion by 2024 and that sounds right based on the large number of companies pitching their Zero Trust wares at RSA 2020.
The enterprise was well represented at the conference and there was a tremendous amount of interest in Zero Trust. Interestingly, even though Zero Trust environments are often made up of several solutions from multiple vendors it hasn’t prevented each of the vendors from evangelizing their flavors of Zero Trust. This left the thousands of attendees to attempt to cut through the Zero Trust buzz and noise and make their own conclusions to the best approach.
https://blogs.oracle.com/cloudsecurity/post/rsa-2020-recap-cloud-security-moves-to-the-front

NO.52 As a security administrator, you found out that there are users outside your co network who are accessing OCI Object Storage Bucket. How can you prevent these users from accessing OCI resources in corporate network?

Create an 1AM policy and create WAF rules

Create an 1AM policy and add a network source

Make OCI resources private instead of public

Create PAR to restrict access the access

NO.53 which three resources are required to encrypt a block volume with the customer managed key?

MAXIMUM SECURITY ZONE

SYMMETRIC MASTER KEY ENCRYPTlON KEY

BLOCK KEY

OCI VAIRT

IAM Policy Allowing Block Storage to Use Keys

Secrets

https://docs.oracle.com/en-us/iaas/Content/SecurityAdvisor/Tasks/creatingsecureblockvolume.htm

NO.54 As a Security Admin you want to inspect the metadata and actual data in your Oracle databases to discover sensitive data and provide comprehensive results listing the sensitive columns and related information. Which Data Safe feature will help you to achieve the above requirement ?

Data Masking

Data Discovery

Security Assessment

User Assessment

NO.55 As a lead Security Architect, you have tasked to restrict access to and from the worker nodes in pods running in Oracle Container Engine for Kubernetes?

Cloud Guard

Vulnerability Scanning

Security Lists

Identity and Access Management

NO.56 Which statement is not true about Cloud Security Posture?

Problems contain data about the specific type of issue that was found.

Problems can be resolved, dismissed, or remediated.

Problems are defined by the type of detector that creates them: activity or configuration.

Problems are created when Cloud Guard discovers a deviation from a responder rule.

https://www.oracle.com/security/cloud-security/what-is-cspm/

NO.57 How can you establish private connectivity over two VCN within same OCI region without traversing the traffic over public internet ?

NAT Gateway

Data Guard

Remote VCN Peering

Local VCN Peering

NO.58 Which resources can be used to create and manage from Vault Service ? Select TWO correct answers

Secret

IAM

Keys

Cloud Guard

NO.59 With regard to WAF in OCI, which of the following statements are NOT customer’s responsibility? Select TWO answers.

Configure WAF policies for websites

WAF edge nodes with High Availability

Configure Bot Management strategies for a website traffic

Import latest OWASP Core Rule Sets

NO.60 How can you restrict access to OCI console from unknown IP addresses?

Create tenancy’s authentication policy and create WAF rules

Create tenancy’s authentication policy and add a network source

Make OCI resources private instead of public

Create PAR to restrict access the access

NO.61 Oracle Object Storage achieves data durability by which of the mechanisms ? Select TWO correct answers

Service Gateway

Redundant Storage across availability domains

Redundant Array of Independent Disks

Object Versioning

NO.62 you want to create a stateless rule for SSH in security list and the ingress role has already been properly configured what combination should you use on the engress role what commination should you use on the egress rule?

select udp for protocol: enter 22 for source port” and all for destination port

select tcp for protocol: enter 22 for source port” and 22 for destination port

select tcp for protocol: enter all for source port” and 22 for destination port.

select tcp for protocol: enter 22 for source port” and all for destination port

Loading …

Positive Aspects of Valid Dumps 1z0-1104-21 Exam Dumps! : https://www.prepawaypdf.com/Oracle/1z0-1104-21-practice-exam-dumps.html

Free 2022 Oracle Cloud Infrastructure 1z0-1104-21 dumps are available by PrepAwayPDF [Q13-Q35]
[Q35-Q59] Pass 1Z0-1064-21 Exam in First Attempt Guaranteed 100% Cover Real Exam Questions [Mar-2022]
[May-2022] Oracle 1Z0-1052-21 Exam Practice Test Questions – PrepAwayPDF [Q22-Q37]
[Q77-Q91] 2022 Updated 1z0-1042-22 Tests Engine pdf – All Free Dumps Guaranteed!

Oracle 1z0-1104-21 Exam Syllabus Topics:

Related posts:

admin

You might also like

Leave a Reply Cancel reply