Reliable 1z0-1104-22 Dumps Questions Available as Web-Based Practice Test Engine
Correct and Up-to-date Oracle 1z0-1104-22 BrainDumps
NEW QUESTION # 19
As a security administrator, you want to create cloud resources that align with Oracle's security principles and best practices. Which security service should you use?
- A. Cloud Guard
- B. Web Application Firewall (WAF)
- C. Identity and Access Management
- D. Security Advisor
Answer: D
Explanation:
NEW QUESTION # 20
Which statement is true about standards?
- A. They are the foundation of corporate governance.
- B. They are result of a regulation or contractual requirement or an industry requirement.
- C. They may be audited.
- D. They are methods and instructions on how to maintain or accomplish the directives of the policy.
Answer: B
NEW QUESTION # 21
Which of the following is necessary step when creating a secret in vault?
- A. Digest Hash should be created of the secret value
- B. Object Storage must be created to run secret service
- C. Vault-managed key is necessary to encrypt the secret
- D. Shamir's secret sharing algorithm should be used to unseal the vault
Answer: C
Explanation:
https://docs.oracle.com/en/database/other-databases/essbase/21/essad/create-vault-and-secrets.html
NEW QUESTION # 22
Which is NOT a compliance document?
- A. Penetration test report
- B. Bridge letter
- C. Attestation
- D. Certificate
Answer: A
Explanation:
Types of Compliance Documents
When viewing compliance documents, you can filter on the following types:
Attestation. A Payment Card Industry (PCI) Data Security Standard (DSS) Attestation of Compliance document.
Audit. A general audit report.
Bridge Letter (BridgeLetter). A bridge letter. Bridge letters provide compliance information for the period of time between the end date of an SOC report and the date of the release of a new SOC report.
Certificate. A document indicating certification by a particular authority, with regard to certification requirements and examination results conforming to said requirements.
SOC3. A Service Organization Controls 3 audit report that provides information relating to a service organization's internal controls for security, availability, confidentiality, and privacy.
Other. A compliance document that doesn't fit into any of the preceding, more specific categories.
https://docs.oracle.com/en-us/iaas/Content/ComplianceDocuments/Concepts/compliancedocsoverview.htm
NEW QUESTION # 23
An automobile company needs to configure Bastion Managed SSH session to a compute instance in a private subnet. What are the TWO prerequisites to configure successfully?
- A. NAT or Service Gateway should be attached to the private subnet
- B. Route rule to a NAT or Service Gateway should be associated with the subnet of the route table
- C. SSH port forwarding should be enabled
- D. There is no need for any gateway in private subnet
Answer: A,B
NEW QUESTION # 24
Which Oracle Data Safe feature minimizes the amount of personal data and allows internal test, development, and analytics teams to operate with reduced risk?
- A. data discovery
- B. security assessment
- C. data encryption
- D. data masking
- E. data auditing
Answer: D
NEW QUESTION # 25
Which volume type contains the image used to boot a compute instance?
- A. Startup volume
- B. Block volume
- C. Boot volume
- D. Init 6 volume
Answer: C
Explanation:
Boot Volumes
When you launch a virtual machine (VM) or bare metal instance based on a platform image or custom image, a new boot volume for the instance is created in the same compartment. That boot volume is associated with that instance until you terminate the instance. When you terminate the instance, you can preserve the boot volume and its data
https://docs.oracle.com/en-us/iaas/Content/Block/Concepts/bootvolumes.htm
NEW QUESTION # 26
You want to make API calls against other OCI services from your instance without configuring user credentials. How would you achieve this?
- A. Create a dynamic group and add a policy.
- B. Create a dynamic group and add your instance.
- C. No configuration is required for making API calls.
- D. Create a group and add a policy.
Answer: A
Explanation:
DYNAMIC GROUP
Dynamic groups allow you to group Oracle Cloud Infrastructure instances as principal actors, similar to user groups. You can then create policies to permit instances in these groups to make API calls against Oracle Cloud Infrastructure services. Membership in the group is determined by a set of criteria you define, called matching rules. https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/callingservicesfrominstances.htm
NEW QUESTION # 27
Which statement about Oracle Cloud Infrastructure Multi-Factor Authentication (MFA) is NOT valid?
- A. Users cannot disable MFA for themselves.
- B. An administrator can disable MFA for another user.
- C. A user can register only one device to use for MFA.
- D. Users must install a supported authenticator app on the mobile device they intend to register for MFA.
Answer: A
NEW QUESTION # 28
Which cache rules criterion matches if the concatenation of the requested URL path and query are identical to the contents of the value field?
- A. URL_PART_CONTAINS
- B. URL_PART_ENDS_WITH
- C. URL_STARTS_WITH
- D. URL_IS
Answer: D
Explanation:
URL_IS: Matches if the concatenation of request URL path and query is identical to the contents of the value field. URL must start with a /.
https://docs.oracle.com/en-us/iaas/tools/terraform-provider-oci/4.57.0/docs/d/waas_waas_policy.html
NEW QUESTION # 29
Which storage type is most effective when you want to move some unstructured data, consisting of images and videos, to cloud storage?
- A. Block volume
- B. Standard storage
- C. File storage
- D. Archive storage
Answer: B
Explanation:
Use Oracle Cloud Infrastructure Object Storage for data to which you need fast, immediate, and frequent access. Data accessibility and performance justifies a higher price point to store data in the Object Storage tier.
The Object Storage service can store an unlimited amount of unstructured data of any content type, including analytic data and rich content, like images and videos.
https://docs.oracle.com/en/solutions/learn-migrate-app-data-to-cloud/considerations-object-storage.html#GUID-AC192B08-5160-4DA7-B43E-001753D99CF1
NEW QUESTION # 30
Which resources can be used to create and manage from Vault Service ? Select TWO correct answers
- A. Cloud Guard
- B. Secret
- C. Keys
- D. IAM
Answer: B,C
Explanation:
NEW QUESTION # 31
A company needs to have some buckets as public in the compartment. You want Cloud Guard to ignore the problem associated with public bucket. Select TWO correct answers
- A. Configure Conditional groups for the detector to fix base line
- B. Dismiss the issues associated with these resources
- C. Make the bucket private so that Cloud Guard won't detect it
- D. First make the bucket private and after few days make the bucket public again
Answer: A,B
NEW QUESTION # 32
On which option do you set Oracle Cloud Infrastructure Budget?
- A. Free-form tags
- B. Tenancy
- C. Instances
- D. Compartments
Answer: D
Explanation:
How Budgets Work
Budgets are set on cost-tracking tags or on compartments (including the root compartment) to track all spending in that cost-tracking tag or for that compartment and its children.
https://docs.oracle.com/en-us/iaas/Content/Billing/Concepts/budgetsoverview.htm
NEW QUESTION # 33
Which security issues can be identified by Oracle Vulnerability Scanning Service? Select TWO correct answers
- A. SQL Injection
- B. Ports that are unintentionally left open can be a potential attack vector for cloud resources
- C. Distributed Denial of Service (DDoS)
- D. CIS published Industry-standard benchmarks
Answer: B,D
Explanation:
NEW QUESTION # 34
How can you convert a fixed load balancer to a flexible load balancer?
- A. Using the Edit Listener option.
- B. Delete the fixed load balancer and create a new one.
- C. There is no way to covert the load balancer.
- D. Use Update Shape workflows.
Answer: D
NEW QUESTION # 35
which two responsibilities will be oracle when you move your it infrastructure to oracle cloud infrastructure?
- A. ACCOUNT ACCESS MANAGEMENT
- B. PROVIDING STRONG SECURITY LIST
- C. Strong IAM Framework
- D. MAINTAINING CUSTOMER DATA
- E. Strong Isolation
Answer: C,E
NEW QUESTION # 36
Cloud Guard detected a risk score of zero in the dashboard, what does this mean ?
- A. Larger number of problems that have high risk levels ( HIGH or CRITICAL )
- B. LOW or MINOR issues
- C. Risk score doesn't say anything. These are just numbers
- D. No problem detected for any resource
Answer: D
Explanation:
NEW QUESTION # 37
What would you use to make Oracle Cloud Infrastructure Identity and Access Management govern resources in a tenancy?
- A. Dynamic groups
- B. Users
- C. Groups
- D. Policies
Answer: D
Explanation:
POLICY
A document that specifies who can access which resources, and how. Access is granted at the group and compartment level, which means you can write a policy that gives a group a specific type of access within a specific compartment, or to the tenancy itself. If you give a group access to the tenancy, the group automatically gets the same type of access to all the compartments inside the tenancy. For more information, see Example Scenario and How Policies Work. The word "policy" is used by people in different ways: to mean an individual statement written in the policy language; to mean a collection of statements in a single, named "policy" document (which has an Oracle Cloud ID (OCID) assigned to it); and to mean the overall body of policies your organization uses to control access to resources.
https://docs.oracle.com/en-us/iaas/Content/Identity/Concepts/overview.htm
NEW QUESTION # 38
Which of the following services are NOT Security Services in OCI ? Select TWO answers.
- A. Vault
- B. Block Volume
- C. Cloud Guard
- D. Data Guard
Answer: B,D
NEW QUESTION # 39
......
Oracle 1z0-1104-22 exam consists of 60 multiple-choice questions that must be completed within 105 minutes. 1z0-1104-22 exam is computer-based and can be taken at a Pearson VUE testing center or online. Candidates must achieve a passing score of 68% to earn the certification.
100% Reliable Microsoft 1z0-1104-22 Exam Dumps Test Pdf Exam Material: https://www.exam4docs.com/1z0-1104-22-study-questions.html
Current 1z0-1104-22 dumps Preparation through Our Practice Test: https://drive.google.com/open?id=14yz1T43ZtCQ-e9luS3MPXO9ewdmaEIKh
