[Dec 24, 2023] Fully Updated Free Actual Oracle 1z0-1104-23 Exam Questions
Free 1z0-1104-23 Questions for Oracle 1z0-1104-23 Exam [Dec-2023]
NEW QUESTION # 19
Which statement is true about Oracle Cloud Infrastructure (OCI) Object Storage server-side encryption?
- A. Each object in a bucket is always encrypted with the same data encryption key.
- B. All the traffic to and from object storage is encrypted by using Transport Layer Security.
- C. Customer-provided encryption keys are never stored in OCI Vault service.
- D. Encryption is not enabled by default.
Answer: B
Explanation:
Oracle Cloud Infrastructure (OCI) Object Storage uses Transport Layer Security (TLS) to encrypt all traffic to and from Object Storage34. This ensures that data is secure during transit.
NEW QUESTION # 20
What does the following identity policy do?
Allow group my-group to use fn-invocation in compartment ABC where target.function.id ='<function-OCID>'
- A. Enables users to invoke all the functions in a compartment except for one specific function
- B. Enables users in a group to create, update, and delete ALL applications and functions in a compartment
- C. Enables users to invoke just one specific function
- D. Enables users to invoke all the functions in a specific application
Answer: C
Explanation:
Explanation
The policy Allow group my-group to use fn-invocation in compartment ABC where target.function.id ='<function-OCID>' gives the group my-group permission to invoke a specific function (identified by its OCID) in the compartment ABC. The fn-invocation verb allows a group to invoke a function, and the condition where target.function.id = '<function-OCID>' ensures that only the specified function can be invoked by this group
NEW QUESTION # 21
What is the minimum active storage duration for logs used by Logging Analytics to be archived?
- A. 60 days
- B. 30 days
- C. 15 days
- D. 10 days
Answer: B
Explanation:
https://docs.oracle.com/en-us/iaas/logging-analytics/doc/manage-storage.html#:~:text=The%20minimum%20Ac The minimum Active Storage Duration (Days) for logs before they can be archived is 30 days.
NEW QUESTION # 22
What is the configuration to avoid publishing messages during the specified time range known as?
- A. Suppression
- B. Statistic
- C. Resource group
- D. Trigger rule
Answer: A
Explanation:
Graphical user interface, text, application, email Description automatically generated
NEW QUESTION # 23
Which storage type is most effective when you want to move some unstructured data, consisting of images and videos, to cloud storage?
- A. Block volume
- B. Archivestorage
- C. File storage
- D. Standard storage
Answer: D
Explanation:
Explanation
Use Oracle Cloud Infrastructure Object Storage for data to which you need fast, immediate, and frequent access. Data accessibility and performance justifies a higher price point to store data in the Object Storage tier.
The Object Storage service can store an unlimited amount of unstructured data of any content type, including analytic data and rich content, like images and videos.
https://docs.oracle.com/en/solutions/learn-migrate-app-data-to-cloud/considerations-object-storage.html#GUID-A
NEW QUESTION # 24
Which statements are CORRECT about Security Zone policy in OCI ? Select TWO correct answers
- A. Resources in a security zone must be accessible from internet
- B. Bucket can't be moved from a security zone to a standard compartment
- C. Block volume canbe moved from a security zone to a standard compartment
- D. Resources in a security zone must be encrypted using customer-managed keys
Answer: B,D
Explanation:
Explanation
Table Description automatically generated
NEW QUESTION # 25
Which Oracle Cloud Service provides restricted accessto target resources?
- A. Internet Gateway
- B. Load balancer
- C. SSL certificate
- D. Bastion
Answer: D
Explanation:
Explanation
Bastion
Oracle Cloud Infrastructure Bastion provides restricted and time-limited access to target resources that don't have public endpoints.
Diagram Description automatically generated
https://docs.oracle.com/en-us/iaas/Content/Security/Concepts/security_features.htm
NEW QUESTION # 26
An automobile company needs to configure Bastion Managed SSH session to a compute instance in a private subnet. What are the TWO prerequisites to configure successfully?
- A. There is no need for any gateway in private subnet
- B. NAT or Service Gateway should be attached to the private subnet
- C. Route rule to a NAT or Service Gateway should be associated with the subnet of the route table
- D. SSH port forwarding should be enabled
Answer: B,C
Explanation:
Explanation
For a Bastion Managed SSH session to a compute instance in a private subnet, the instance must have access to the internet, which can be provided by a NAT Gateway or a Service Gateway34. Additionally, a route rule directing traffic to the NAT or Service Gateway should be associated with the subnet's route table34.
NEW QUESTION # 27
In which two ways can you improve data durability in Oracle Cloud Infrastructure Object Storage?
- A. Enable server-sideencryption
- B. Enable Versioning
- C. Limit delete permissions
- D. Setup volumes in a RAID1 configuration
- E. Enable client-side encryption
Answer: B,C
Explanation:
Enabling versioning can improve data durability in OCI Object Storage by keeping multiple versions of an object in the same bucket5.
Limiting delete permissions can also improve data durability by preventing unauthorized users from deleting data
NEW QUESTION # 28
which two responsibilities will be oracle when you move your it infrastructure to oracle cloud infrastructure?
- A. Strong Isolation
- B. Strong IAM Framework
- C. PROVIDING STRONG SECURITY LIST
- D. MAINTAINING CUSTOMER DATA
- E. ACCOUNT ACCESS MANAGEMENT
Answer: A,B
Explanation:
Oracle is responsible for providing a strong Identity and Access Management (IAM) framework in OCI.
The IAM service lets you control who has access to your cloud resources, what type of access they have, and to which specific resources. You can find more details about this in the Oracle Cloud Infrastructure documentation.
Oracle also ensures strong isolation in its cloud infrastructure, which means that your resources are isolated from other tenants and from Oracle staff. This isolation extends from physical separation of hardware all the way up to access controls on APIs. You can find more details about this in the Oracle Cloud Infrastructure documentation.
NEW QUESTION # 29
An e-commerce company needs to authenticate with third-party API that don't support OCI's signature-based authentication.
What can be the solution for the above scenario?
- A. Security Token
- B. Asymmetric keys
- C. Auth Token/Swift Password
- D. API Key Authentication
Answer: C
Explanation:
Explanation
Graphical user interface, text, application, email Description automatically generated
NEW QUESTION # 30
What must be configured for a load balancer to accept incoming traffic?
- A. Route table entry pointing to the listener IP address
- B. Service Gateway
- C. SSL certificate
- D. Listener
Answer: D
Explanation:
Explanation
A listener is an entity that checks for connection requests. The load balancerlistener listens for ingress client traffic using the port you specify within the listener and the load balancer's public IP.
https://docs.oracle.com/en-us/iaas/Content/GSG/Tasks/loadbalancing.htm
To create a listener:
On your Load Balancer Details page, click Listeners.
Click Create Listener.
Enter the following:
Name: Enter afriendly name. Avoid entering confidential information.
Protocol: Select HTTP.
Port: Enter 80 as the port on which to listen for incoming traffic.
Backend Set: Select the backend set you created.
Click Create.
NEW QUESTION # 31
As a security administrator, you found out that there are users outside your co network who are accessing OCI Object Storage Bucket. How can you prevent these users from accessing OCI resources in corporate network?
- A. Create an 1AM policy and create WAF rules
- B. Create an 1AM policy and add a network source
- C. Create PAR to restrict access the access
- D. Make OCI resources private instead of public
Answer: B
Explanation:
Explanation
Graphical user interface, text, application Description automatically generated
NEW QUESTION # 32
Which of the following services are NOT Security Services in OCI ? Select TWO answers.
- A. Vault
- B. Block Volume
- C. Cloud Guard
- D. Data Guard
Answer: B,D
Explanation:
Data Guard is a feature of Oracle Database that provides a set of tools to manage data availability, and it's not a security service. It provides a comprehensive set of services that create, maintain, manage, and monitor one or more standby databases to enable production Oracle databases to survive disasters and data corruptions. You can find more details about this in the Oracle Data Guard documentation.
Block Volume is a storage service in OCI, not a security service. It provides scalable block storage using NVMe SSDs or spinning HDDs. You can find more details about this in the Oracle Cloud Infrastructure documentation
NEW QUESTION # 33
Which Oracle Data Safe feature minimizes the amount of personal data and allows internal test, development, and analytics teams to operate with reduced risk?
- A. data encryption
- B. data auditing
- C. data discovery
- D. security assessment
- E. data masking
Answer: E
Explanation:
Explanation
Data masking in Oracle Data Safe minimizes the amount of personal data and allows internal test, development, and analytics teams to operate with reduced risk91011. It replaces sensitive or confidential information in non-production databases with realistic and fully functional data with similar characteristics as the original data
NEW QUESTION # 34
Which is NOT a part of Observability and Management Services?
- A. Logging Analytics
- B. OCI Management Service
- C. Logging
- D. Event Services
Answer: B
Explanation:
Explanation
https://www.oracle.com/in/manageability/
NEW QUESTION # 35
Which securityissues can be identified by Oracle Vulnerability Scanning Service? Select TWO correct answers
- A. SQL Injection
- B. CISpublished Industry-standard benchmarks
- C. Ports that are unintentionally left open can be a potential attack vector for cloud resources
- D. Distributed Denial of Service (DDoS)
Answer: B,C
Explanation:
Explanation
Graphical user interface, text, application, email Description automatically generated
NEW QUESTION # 36
An automobile company needs to configure Bastion Managed SSH session to a compute instance in a private subnet. What are the TWO prerequisites to configure successfully?
- A. There is no need for any gateway in private subnet
- B. NAT or Service Gateway should be attached to the private subnet
- C. Route rule to a NAT or Service Gateway should be associated with the subnet of the route table
- D. SSH port forwarding should be enabled
Answer: B,C
Explanation:
Explanation
For a Bastion Managed SSH session to a compute instance in a private subnet, the instance must have access to the internet, which can be provided by a NAT Gateway or a Service Gateway34. Additionally, a route rule directing traffic to the NAT or Service Gateway should be associated with the subnet's route table34.
NEW QUESTION # 37
As a security administrator, you want to create cloud resources that alignwith Oracle's security principles and best practices. Which security service should you use?
- A. Cloud Guard
- B. Security Advisor
- C. Web Application Firewall (WAF)
- D. Identity and Access Management
Answer: B
Explanation:
Explanation
Graphical user interface, text, application, email Description automatically generated
NEW QUESTION # 38
What information do youget by using the Network Visualizer tool?
- A. Interconnectivity of VCNs
- B. Organization of subnets and VLANs across availability domains
- C. Routes defined between subnets and gateways
- D. State of subnets in a VCN
Answer: A
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/network_visualizer.htm You can view and understand the following from this diagram:
How VCNs are inter-connected
How on-premises networks are connected (using FastConnect or Site-to-Site VPN) Which routing entities (DRGs and so on) control trafficrouting How your transit routing is configured
NEW QUESTION # 39
Which components are a part of the OCI Identity and Access Management service?
- A. Regional subnets
- B. Policies
- C. VCN
- D. Compute instances
Answer: B
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/Content/Identity/Concepts/overview.htm
NEW QUESTION # 40
A member of operations team has set Pre-Authenticated Request (PAR) associated with a bucket to an incorrect date and now wants to edit the PARrequest. How can this be achieved?
- A. Delete the bucket associated with PAR and recreate it
- B. Delete both PAR as well as the bucket then recreate both
- C. Don't set an expiration time for PAR
- D. Delete the PAR and recreate it with the required date
Answer: D
Explanation:
Explanation
Graphical user interface, text, application, email Description automatically generated
NEW QUESTION # 41
You want software that can automatically collect and aggregate log data generated throughout your organization's infrastructure, analyze it, and send alerts if it detects a deviation from the norm.
Which software must you use?
- A. Security Information and Event Management (SIEM)
- B. Security Integration Management (SIM)
- C. Security Information Management (SIM)
- D. SecurityEvent Management (SEM)
Answer: A
Explanation:
Explanation
SIEM software can automatically collect and aggregate log data generated throughout your organization's infrastructure, analyze it, and send alerts if it detects a deviation from the norm23.
NEW QUESTION # 42
What are the security recommendations and best practices for Oracle Functions?
- A. Grant privileges to UID and GID 1000, such that the functions running within a container acquire the default rootcapabilities.
- B. Add applications to network security groups for fine-grained ingress/egress rules.
- C. Ensure that functions in a VCN have restricted access to resources and services.
- D. Define a policy statement that enables access to functions for requests coming from multiple IP addresses.
Answer: B
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/securitylists.htm
NEW QUESTION # 43
Which Cloud Guard component identifies issues with resources or user actions and alerts you when an issue is found?
- A. Targets
- B. Detectors
- C. Responders
- D. Problems
Answer: B
Explanation:
Explanation
Detector
Performs checks to identify potential security problems based on activities or configurations. Rules followed to identify problems are the same for allcompartments in a target.
https://docs.oracle.com/en-us/iaas/cloud-guard/using/part-start.htm
NEW QUESTION # 44
......
Validate your 1z0-1104-23 Exam Preparation with 1z0-1104-23 Practice Test: https://troytec.validtorrent.com/1z0-1104-23-valid-exam-torrent.html