2024 Valid 1z0-1104-23 Dumps for Helping Passing Oracle Exam!
Download Free Oracle 1z0-1104-23 Exam Questions & Answer
NEW QUESTION # 26
As a security administrator, you want to create cloud resources that alignwith Oracle's security principles and best practices. Which security service should you use?
- A. Identity and Access Management
- B. Web Application Firewall (WAF)
- C. Security Advisor
- D. Cloud Guard
Answer: C
Explanation:
NEW QUESTION # 27
Which Oracle Data Safe feature minimizes the amount of personal data and allows internal test, development, and analytics teams to operate with reduced risk?
- A. data encryption
- B. security assessment
- C. data discovery
- D. data auditing
- E. data masking
Answer: E
Explanation:
Explanation
Data masking in Oracle Data Safe minimizes the amount of personal data and allows internal test, development, and analytics teams to operate with reduced risk91011. It replaces sensitive or confidential information in non-production databases with realistic and fully functional data with similar characteristics as the original data
NEW QUESTION # 28
You need to set up instance principals so that an application running on an Oracle Cloud Infrastructure (OCI) instance can call public OCI services, without the need to configure user credentials. A developer in your team has already configured the application to authenticate using the instance principals provider. Which is NOT a necessary step to complete this set up? (Choose the best Answer.)
- A. Create a policy granting permissions to the dynamic group to access services in your compartment or tenancy
- B. Create a dynamic group with matching rules to specify which instances you want to al-low to make API calls against services.
- C. Generate Auth Tokens to enable instances in the dynamic group to authenticate with APIs.
- D. Deploy the application to all the instances that belong to the dynamic group
Answer: C
NEW QUESTION # 29
How can you restrict access to OCI console from unknown IP addresses?
- A. Create tenancy's authentication policy and create WAF rules
- B. Create PAR to restrict access the access
- C. Create tenancy's authentication policy and add a network source
- D. Make OCI resources private instead of public
Answer: C
Explanation:
Explanation
Graphical user interface, text, application, Word Description automatically generated
NEW QUESTION # 30
Which OCI cloud service lets you centrally manage the encryption keys thatprotect your data and the secret credentials that you use to securely access resources?
- A. Data Safe
- B. Data Guard
- C. Vault
- D. Cloud Guard
Answer: C
Explanation:
Explanation
Oracle Cloud Infrastructure Vault is a managed service that lets you centrally manage the encryption keysthat protect your data and the secret credentials that you use to securely access resources. Vaults securely store master encryption keys and secrets that you might otherwise store in configuration files or in code.
Specifically, depending on the protection mode, keys are either stored on the server or they are stored on highly available and durable hardware security modules (HSM) that meet Federal Information Processing Standards (FIPS) 140-2 Security Level 3 security certification.
https://docs.oracle.com/en-us/iaas/Content/KeyManagement/Concepts/keyoverview.htm
NEW QUESTION # 31
What information do youget by using the Network Visualizer tool?
- A. Routes defined between subnets and gateways
- B. Organization of subnets and VLANs across availability domains
- C. State of subnets in a VCN
- D. Interconnectivity of VCNs
Answer: D
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/network_visualizer.htm You can view and understand the following from this diagram:
How VCNs are inter-connected
How on-premises networks are connected (using FastConnect or Site-to-Site VPN) Which routing entities (DRGs and so on) control trafficrouting How your transit routing is configured
NEW QUESTION # 32
As a lead Security Architect, you have tasked to restrict access to and from the worker nodes in pods running in Oracle Container Engine for Kubernetes?
- A. Identity and Access Management
- B. Vulnerability Scanning
- C. Security Lists
- D. Cloud Guard
Answer: C
Explanation:
NEW QUESTION # 33
what is the use case for Oracle cloudinfrastructure logging analytics service?
- A. automatically and manage any log based on a subscription model
- B. automatically create instances to collect logs analysis and send reports
- C. monitors, aggregates, indexes and analyzes all log data from on-premises.
- D. labels data packets that pass through the internet gateway
Answer: C
Explanation:
Oracle Cloud Infrastructure Logging Analytics is a machine learning-based cloud service that monitors, aggregates, indexes, and analyzes all log data from on-premises and multicloud environments. Enabling users to search, explore, and correlate this data to troubleshoot and resolve problems faster and derive insights to make better operational decisions.
https://www.oracle.com/manageability/logging-analytics/
NEW QUESTION # 34
You are using a custom application with third-party APIs to manage application and data hosted in an Oracle Cloud Infrastructure(OCI) tenancy. Although your third-party APIs don't support OCI's signature-based authentication, you want them to communicate with OCI resources. Which authentication option must you use to ensure this?
- A. SSH Key Pair with 2048-bit algorithm
- B. API Signing Key
- C. Auth Token
- D. OCI username and Password
Answer: C
Explanation:
Explanation
An auth token in OCI is an Oracle-generated token that you can use to authenticate with third-party APIs78. This can be useful when the third-party APIs do not support OCI's signature-based authentication
NEW QUESTION # 35
What is the configuration to avoid publishing messages during the specified time range known as?
- A. Suppression
- B. Resource group
- C. Trigger rule
- D. Statistic
Answer: A
Explanation:
NEW QUESTION # 36
When doesCloud Guard re-open an issue and update the history?
- A. If it detects an issue for a previously resolved/dismissed activity problem
- B. If it detects an issue for a previously resolved configuration problem
- C. If it detects an issue again for an Open (unresolved) problem
- D. If it detects an issue for a previously dismissed configuration problem
Answer: B
Explanation:
Explanation
If Cloud Guard detects an issue again for:
An Open (unresolved) problem, it updates the problem history, but doesn't create a new problem.
A previouslysolved problem, it reopens the issue and updates the history.
A previously dismissed problem, it updates the history.
https://docs.oracle.com/en-us/iaas/cloud-guard/using/problems-page.htm
NEW QUESTION # 37
Which security issue CANNOT be identified using the Oracle Cloud Infrastructure (OCI) Vulnerability Scanning Service (VSS)? (Choose the best Answer.)
- A. OS packages that require updates and patches to address vulnerabilities
- B. OS configurations that hackers might exploit
- C. Cross-Site Scripting (XSS)
- D. Ports that are unintentionally left open
Answer: C
NEW QUESTION # 38
Your web application is protected by the Web Application Firewall (WAF) service in Oracle Cloud Infrastructure (OCT). You want to block traffic originating from a country where your company is not allowed to do business. Where would you create a WAF rule to block traffic from a specific country? (Choose the best Answer.)
- A. Origin Management
- B. Cache Rules
- C. Protection Rules
- D. Bet Management
- E. Access Control Rules
Answer: E
NEW QUESTION # 39
Which OCI service canindex, enrich, aggregate, explore, search, analyze, correlate, visualize and monitor data?
- A. Logging Analytics
- B. Data Safe
- C. Data Guard
- D. WAF
Answer: A
Explanation:
NEW QUESTION # 40
An e-commerce company needs to authenticate with third-party API that don't support OCI's signature-based authentication.
What can be the solution for the above scenario?
- A. Auth Token/Swift Password
- B. API Key Authentication
- C. Asymmetric keys
- D. Security Token
Answer: A
Explanation:
NEW QUESTION # 41
Your company has implemented a new VPN connection policy, three months after you connected your on-premises network to Oracle Cloud Infrastructure (OCI). Your chief security officer has instructed you to edit the IPSec connection and replace the shared secrets with the new ones that he has provided. Where do you edit the shared secrets? (Choose the best Answer.)
- A. Customer Premises Equipment
- B. Individual tunnels
- C. IPsec connection
- D. Dynamic Routing Gateway
Answer: D
NEW QUESTION # 42
Challenge 4 - Task 1 of 6
Configure Web Application Firewall to Protect Web Server Against XSS Attack Scenario You have to protect web applications hosted on OCI from cross-site scripting (XSS) attacks. You can use the OCI Web Application Firewall (WAF) capabilities to create rules that compare against incoming requests to determine if the request contains an XSS attack payload. If a request is determined to be an attack, WAF should return the HTTP Service Unavailable (503) error.
To ensure that the configured WAF blocks the XSS attack, run the following script: [http://<public- ip-enforcement-point>/index.html?<p style="background:url(javascript:alert(1))"](http://<public- ip-enforcement-point>/index.html?<p style="background:url(javascript:alert(1))">) To complete this deployment, you have to perform the following tasks in the environment provisioned for you:
Configure a Virtual Cloud Network (VCN)
Create a Compute Instance and install the Web Server
Create a Load Balancer and update Security List
Create a WAF policy
Configure Protection Rules against XSS attacks
Verify the created environment against XSS attacks
Note: You are provided with access to an OCI Tenancy, an assigned compartment, and OCI credentials. Throughout your exam, ensure to use the assigned Compartment 99233424-C01 and Region us-ashburn-1.
Complete the following task in the provisioned OCI environment:
Create a VCN using wizard with the name IAD-WAF-PBT-VCN-01
Answer:
Explanation:
See the solution below in Explanation
Explanation:
SOLUTION:
From the navigation menu, select Networking and then click Virtual Cloud Network.
In the left navigation pane, under List Scope, select <your working compartment> from the drop-down menu.
Click Start VCN Wizard.
Select Create VCN with Internet Connectivity and click Start VCN Wizard.
On the Configuration page, enter the following:
a) Name: IAD-WAF-PBT-VCN-01
b) Note: Leave all the other options in their default setting.
c) Click Next.
d) Verify the details on the Review and Create page.
Click Create to start creating the VCN and its resources.
Click View Virtual Cloud Network to verify the creation of the VCN and its resources.
You can now see that the VCN has been successfully created and is in the Available state, with the following components:
VCN
Public subnet
Private subnet
Internet gateway
NAT gateway
Service gateway
This format keeps the instructions intact while preserving the original content.
NEW QUESTION # 43
Which securityissues can be identified by Oracle Vulnerability Scanning Service? Select TWO correct answers
- A. SQL Injection
- B. Distributed Denial of Service (DDoS)
- C. CISpublished Industry-standard benchmarks
- D. Ports that are unintentionally left open can be a potential attack vector for cloud resources
Answer: C,D
Explanation:
Explanation
Graphical user interface, text, application, email Description automatically generated
NEW QUESTION # 44
With regard to vulnerability and cloud penetration testing, which rules of engagement apply? Select TWO correct answers.
- A. Testing should target any other subscription or any other Oracle Cloud customer resources
- B. Physical penetration and vulnerability testing of Oraclefacilities is prohibited
- C. You are responsible for any damages to Oracle Cloud customers that are caused by your testing activities
- D. Any port scanning must be performed in an aggressive mode
Answer: B,C
Explanation:
NEW QUESTION # 45
You notice problems in Cloud Guard, and the Risk score in your dashboard shows a very high number at 9300. What should you do next? (Choose the best Answer.)
- A. Identify your Risk level: CRITICAL and HIGH problems from the Problem page and see if you can resolve them
- B. Do nothing. Keep monitoring your Risk score: eventually it will go down.
- C. Dismiss all of the Risk levels: LOW and MINOR problems.
- D. Dismiss all of the Risk levels: HIGH problems
Answer: A
NEW QUESTION # 46
......
1z0-1104-23 Exam Dumps For Certification Exam Preparation: https://www.exam4docs.com/1z0-1104-23-study-questions.html
Online VALID 1z0-1104-23 Exam Dumps File Instantly: https://drive.google.com/open?id=1F3hKxGQQYkh_MFZpWAba12p9uMUPzIkV
