Prepare for your exam certification with our 1z0-1104-23 Certified Oracle [Q35-Q59] – IT Certification Exam Questions & Answers

NEW QUESTION 35
Cloud Guard detected a risk score of zeroin the dashboard, what does this mean ?

Risk score doesn’t say anything. These are just numbers

LOW or MINOR issues

Larger number of problems that have high risk levels ( HIGH or CRITICAL )

No problem detected for any resource

NEW QUESTION 36
Challenge 2
Least-Privileged Model Enforcement Leveraging Custom Security Zones
Scenario
In deploying a new application, a cloud customer needs to reflect different security postures. If a security zone is enabled with the Maximum Security Zone recipe, the customer will be unable to create or update a resource in the Security Zone if the action violates the attached Maximum Security Zone policy.
As an application requirement, the customer requires a compute instance in the public subnet. You, therefore, need to configure Custom Security Zones that allow the creation of compute instances in the public subnet.
To complete this deployment, you have to perform the following tasks in the environment provisioned for you:
* Create a Custom Security Zone recipe to allow compute instances in the public subnet.
* Create a Security Zone using the Custom Security Zone recipe.
* Configure a Virtual Cloud Network (VCN) and Public Subnet.
* Provision a Compute Instance in the public subnet.

Note: You are provided with access to an OCI Tenancy, an assigned compartment, and OCI credentials. Throughout your exam, ensure to use the assigned Compartment 99234021-C01 and Region us-ashburn-1 Complete the following tasks in the provisioned OCI environment:
Create a Custom Recipe with the name
Create a Security Zone with the name
Create a VCN with the name IAD-SP-PBT-VCN-01
Create a Public Subnet with the name IAD-SP-PBT-PUBSNET-01
Create a Compute Instance with the name IAD-SP-PBT-1-VM-01, using the “Oracle Linux 8” image and “VM.Standard2.1” as shape

NEW QUESTION 37
You configured the events service for your Cloud Guard problems to send email notifications, but you do not see any, which three things should you check to resolve this? (Choose three.)

Ensure that you have the Cloud Guard retention policy configured,

Ensure that your Cloud Guard targets have the Cloud Event responder recipe attached with the notification rule enabled.

Ensure that the Event rule is created in the same compartment (or parent of it) where your problem resource exists.

Ensure that the event is configured in the Cloud Guard reporting region.

Ensure that Cloud Guard is enabled in every single region individually

NEW QUESTION 38
You notice problems in Cloud Guard, and the Risk score in your dashboard shows a very high number at 9300. What should you do next? (Choose the best Answer.)

Dismiss all of the Risk levels: LOW and MINOR problems.

Identify your Risk level: CRITICAL and HIGH problems from the Problem page and see if you can resolve them

Do nothing. Keep monitoring your Risk score: eventually it will go down.

Dismiss all of the Risk levels: HIGH problems

NEW QUESTION 39
What information do youget by using the Network Visualizer tool?

State of subnets in a VCN

Interconnectivity of VCNs

Routes defined between subnets and gateways

Organization of subnets and VLANs across availability domains

NEW QUESTION 40
Which cache rules criterion matches if the concatenation of the requested URL path and query are identical to the contents of the value field?

URL_PART_CONTAINS

URL_IS

URL_PART_ENDS_WITH

URL_STARTS_WITH

NEW QUESTION 41
Which Oracle Data Safe feature enables the internal test, development, and analytics teams to operate effectively while minimizing their exposure to sensitive data? (Choose the best Answer.)

Data encryption

Data Auditing

Data masking

Data discovery

Security assessment

NEW QUESTION 42
As a security architect, how can you preventunwanted bots while desirable bots are allowed to enter?

Data Guard

Vault

Compartments

Web Application Firewall (WAF)

NEW QUESTION 43
Which of the following services are NOT Security Services in OCI ? Select TWO answers.

Data Guard

Cloud Guard

Vault

Block Volume

NEW QUESTION 44
With regard to vulnerability and cloud penetration testing, which rules of engagement apply? Select TWO correct answers.

Any port scanning must be performed in an aggressive mode

Physical penetration and vulnerability testing of Oraclefacilities is prohibited

Testing should target any other subscription or any other Oracle Cloud customer resources

You are responsible for any damages to Oracle Cloud customers that are caused by your testing activities

NEW QUESTION 45
What is the configuration to avoid publishing messages during the specified time range known as?

Trigger rule

Statistic

Resource group

Suppression

NEW QUESTION 46
Which challenge is generally the first level of bot mitigation, but not sufficient with more advanced bot tools?

CAPTCHA challenge

JavaScript challenge

Device fingerprint challenge

Human interaction challenge

NEW QUESTION 47
In which two ways can you improve data durability in Oracle Cloud Infrastructure Object Storage?

Setup volumes in a RAID1 configuration

Enable server-sideencryption

Enable Versioning

Limit delete permissions

Enable client-side encryption

NEW QUESTION 48
You want to include all instances in any of two or morecompartments, which syntax should you use for dynamic policy you want to create for “Prod” compartment and “SIT” compartment?
Prod OCID : ‘JON.Prod’
SIT OCID : ‘JON.SIT’

Any { instance in compartment ‘Prod’ and Compartment ‘SIT’ }

Any { instance.compartment.id = ‘JON.Prod’, instance.compartment.id = ‘JON.SIT’

All { instance.compartment.id = ‘JON.Prod’, instance.compartment.id = ‘JON.SIT’

All { instance in compartment ‘Prod’ and Compartment ‘SIT’ }

NEW QUESTION 49
Challenge 4 – Task 3 of 6
Configure Web Application Firewall to Protect Web Server Against XSS Attack Scenario You have to protect web applications hosted on OCI from cross-site scripting (XSS) attacks. You can use the OCI Web Application Firewall (WAF) capabilities to create rules that compare against incoming requests to determine if the request contains an XSS attack payload. If a request is determined to be an attack, WAF should return the HTTP Service Unavailable (503) error.
To ensure that the configured WAF blocks the XSS attack, run the following script: [http://<public- ip-enforcement-point>/index.html?<p style=”background:url(javascript:alert(1))”](http://<public- ip-enforcement-point>/index.html?<p style=”background:url(javascript:alert(1))”>) To complete this deployment, you have to perform the following tasks in the environment provisioned for you:
Configure a Virtual Cloud Network (VCN)
Create a Compute Instance and install the Web Server
Create a Load Balancer and update Security List
Create a WAF policy
Configure Protection Rules against XSS attacks
Verify the created environment against XSS attacks

Note: You are provided with access to an OCI Tenancy, an assigned compartment, and OCI credentials. Throughout your exam, ensure to use the assigned Compartment 99233424-C01 and Region us-ashburn-1.
Complete the following task in the provisioned OCI environment:
Go to the VCN IAD-WAF-PBT-VCN-01.
Create a Security List with the name IAD-SP-PBT-LB-SL-01.
Create a Public subnet named LB-Subnet-IAD-SP-PBT-SNET-02 and attach the above-created security list.
Create a Load Balancer with the name IAD-SP-PBT-LB-01.
Create a Listener Name with the name IAD_SP_PBT_LB_LISN_01.
Add appropriate Ingress and Egress rules to IAD-SP-PBT-LB-SL-01, to allow http traffic to the Load Balancer subnet.

NEW QUESTION 50
You are using a custom application with third-party APIs to manage application and data hosted in an Oracle Cloud Infrastructure(OCI) tenancy. Although your third-party APIs don’t support OCI’s signature-based authentication, you want them to communicate with OCI resources. Which authentication option must you use to ensure this?

OCI username and Password

API Signing Key

SSH Key Pair with 2048-bit algorithm

Auth Token

NEW QUESTION 51
A programmer is developing a Node.js application which will run in a Linux server on their on-premises data center. This application will access various Oracle Cloud Infrastructure (OCI) services using OCI SDKs. What is the secure way to access OCI services with OCI Identity and Access Management (IAM)? (Choose the best Answer.)

Create an OCI IAM policy with appropriate permissions to access the required OCT services and assign the policy to the on-premises Linux server.

Create a new OCI IAM user, add the user to a group associated with a policy that grants the desired permissions to OCI services. Is the on-premises Linux server, generate the key pair Used for signing API requests and upload the public key to the IAN user.

Create a new OCI IAM user associated with a dynamic group and a policy that grants the desired permissions to OCI services. Add the on-premises Linux server in the dynamic group

Create a new OCI IAM user, add the user to a group associated with a policy that grants the desired permissions to OCI services In the on-premises Linux server, add the user name and password to a file used by dj authentication.

NEW QUESTION 52
You want software that can automatically collect and aggregate log data generated throughout your organization’s infrastructure, analyze it, and send alerts if it detects a deviation from the norm.
Which software must you use?

Security Information Management (SIM)

SecurityEvent Management (SEM)

Security Integration Management (SIM)

Security Information and Event Management (SIEM)

NEW QUESTION 53
Which Oracle Data Safe feature minimizes the amount of personal data and allows internal test, development, and analytics teams to operate with reduced risk?

data auditing

data encryption

security assessment

data masking

data discovery

NEW QUESTION 54
Which type of file system does file storage use?

NFSv3

iSCSI

Paravirtualized

NVMe

SSD

NEW QUESTION 55
Which tasks can you perform on a dedicated virtual machine host?

Manual scaling

Creating instance pools

Instance configurations

Capacity reservations

NEW QUESTION 56
A company has OCI tenancy which has mount target associated with two File Systems, CG_1 and CG_2. These FileSystems are accessed by IP-based clients AB_1 and AB_2 respectively. As a security administrator, how can you provide access to both clients such that CGI has Read only access on AB1 and CG_2 has Read/Write access on AB_2?

NFS Export Option

Access Control Lists

NFS v3 Unix Security

Vault

NEW QUESTION 57
A company, ABC, is planning to launch a new web application on OCI. Based on past experiences, they expect a significant surge in traffic after the launch. You are responsible for ensuring that the application is highly available. Which step would you perform to achieve this goal? (Choose the best Answer.)

Use a Virtual Cloud Network (VCN) with subnets, security lists, and routing rules to isolate the web application from the Internet and other resources.

Use a load balancer to distribute incoming traffic evenly across multiple instances of the web application.

Configure Cloud Guard to prevent large amounts of traffic from reaching the web application.

Implement security controls, such as web application firewalls, to protect against com-mon attack vectors.

NEW QUESTION 58
Which type of software do you use to centrally distributeand monitor the patch level of systems throughout the enterprise?

Network Monitor software

Web Application Firewall

Patch Management software

Recovery Manager software

NEW QUESTION 59
You want software that can automatically collect and aggregate log data generated throughout your organization’s infrastructure, analyze it, and send alerts if it detects a deviation from the norm.
Which software must you use?

Security Information Management (SIM)

SecurityEvent Management (SEM)

Security Integration Management (SIM)

Security Information and Event Management (SIEM)