Oracle Cloud Infrastructure 2023 Security Professional - 1z0-1104-23 Exam Questions
QUESTION NO: 1
Which component helps move logging data to other services, such as archiving log data in object storage?
Which component helps move logging data to other services, such as archiving log data in object storage?
Correct Answer: B
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 2
You are using a custom application with third-party APIs to manage application and data hosted in an Oracle Cloud Infrastructure(OCI) tenancy. Although your third-party APIs don't support OCI's signature-based authentication, you want them to communicate with OCI resources. Which authentication option must you use to ensure this?
You are using a custom application with third-party APIs to manage application and data hosted in an Oracle Cloud Infrastructure(OCI) tenancy. Although your third-party APIs don't support OCI's signature-based authentication, you want them to communicate with OCI resources. Which authentication option must you use to ensure this?
Correct Answer: B
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 3
Challenge 3 - Task 1 of 4
Set Up a Bastion Host to Access the Compute Instance in a Private Subnet Scenario A compute instance is provisioned in a private subnet that is not accessible through the Internet. To access the compute instance resource in a private subnet, you must provide a time-bound SSH session without deploying and maintaining a public subnet and a jump server, which eliminates the hassle and potential attack surface from remote access.
To complete this deployment, you have to perform the following tasks in the environment provisioned for you:
* Configure a Virtual Cloud Network (VCN) and a Private Subnet.
* Provision a Compute Instance in the private subnet and enable Bastion Plugin.
* Create a Bastion and Bastion session.
* Connect to a compute instance using Managed SSH session.
Note: You are provided with access to an OCI Tenancy, an assigned compartment, and OCI credentials. Throughout your exam, ensure to use the assigned Compartment 99233424-C01 and Region us-ashburn-1 Complete the following tasks in the provisioned OCI environment:
Create a Virtual Cloud Network (VCN) with the name PBT-BAS-VCN-01
Create a Private Subnet with the name PBT-BAS-SNET-01
Create a Service Gateway with the name PBT-BAS-SG-01, using the service "All IAD Services in Oracle Services Network" Add Route Rules for Service Gateway
Challenge 3 - Task 1 of 4
Set Up a Bastion Host to Access the Compute Instance in a Private Subnet Scenario A compute instance is provisioned in a private subnet that is not accessible through the Internet. To access the compute instance resource in a private subnet, you must provide a time-bound SSH session without deploying and maintaining a public subnet and a jump server, which eliminates the hassle and potential attack surface from remote access.
To complete this deployment, you have to perform the following tasks in the environment provisioned for you:
* Configure a Virtual Cloud Network (VCN) and a Private Subnet.
* Provision a Compute Instance in the private subnet and enable Bastion Plugin.
* Create a Bastion and Bastion session.
* Connect to a compute instance using Managed SSH session.
Note: You are provided with access to an OCI Tenancy, an assigned compartment, and OCI credentials. Throughout your exam, ensure to use the assigned Compartment 99233424-C01 and Region us-ashburn-1 Complete the following tasks in the provisioned OCI environment:
Create a Virtual Cloud Network (VCN) with the name PBT-BAS-VCN-01
Create a Private Subnet with the name PBT-BAS-SNET-01
Create a Service Gateway with the name PBT-BAS-SG-01, using the service "All IAD Services in Oracle Services Network" Add Route Rules for Service Gateway
Correct Answer:
See the solution below in Explanation
Explanation:
Solutions:
Sign in to your OCI free tier account.
Select Networking from the navigation menu and click Virtual Cloud Networks (VCNs).
Select your working compartment under List Scope from the drop-down menu in the left navigation pane.
Click Create VCN.
In the Create a Virtual Cloud Network dialogue box, enter the following details:
a. Name: PBT-BAS-VCN-01
b. IPV4CIDR Blocks: 10.0.0.0/16 c. Note: Leave all the other options in their default setting.
d. Click Create VCN. You can now see that the VCN has been created successfully.
Click Create Subnet.
In the Create Subnet dialogue box, enter the following details:
a. Name: PBT-BAS-SNET-01
b. Subnet Type: Regional
c. IPV4CIDR Blocks: 10.01.0/24 d. Subnet Access: Private Subnet
e. Note: Leave all the other options in their default setting.
f. Click Create Subnet. You can see that the subnet has been created successfully.
Under Resources, click Service Gateways in the left navigation pane.
Click Create Service Gateway and enter the following details:
a. Name: PBT-BAS-SG-01
b. Services: All <region> Services in Oracle Services Network.
c. Click Create Service Gateway. You can see that the service gateway has been created successfully.
d. Click Close.
Under Resources, click Route Tables in the left navigation pane.
Click the Default Route Table from the list.
Click Add Route Rules and enter the following values:
a. Target Type: Service Gateway
b. Destination Service: All <region> Services in Oracle Services Network.
c. Target Service Gateway: PBT-BAS-SG-01
d. Description: Description for Service gateway route rule e. Click Add Route Rules
Explanation:
Solutions:
Sign in to your OCI free tier account.
Select Networking from the navigation menu and click Virtual Cloud Networks (VCNs).
Select your working compartment under List Scope from the drop-down menu in the left navigation pane.
Click Create VCN.
In the Create a Virtual Cloud Network dialogue box, enter the following details:
a. Name: PBT-BAS-VCN-01
b. IPV4CIDR Blocks: 10.0.0.0/16 c. Note: Leave all the other options in their default setting.
d. Click Create VCN. You can now see that the VCN has been created successfully.
Click Create Subnet.
In the Create Subnet dialogue box, enter the following details:
a. Name: PBT-BAS-SNET-01
b. Subnet Type: Regional
c. IPV4CIDR Blocks: 10.01.0/24 d. Subnet Access: Private Subnet
e. Note: Leave all the other options in their default setting.
f. Click Create Subnet. You can see that the subnet has been created successfully.
Under Resources, click Service Gateways in the left navigation pane.
Click Create Service Gateway and enter the following details:
a. Name: PBT-BAS-SG-01
b. Services: All <region> Services in Oracle Services Network.
c. Click Create Service Gateway. You can see that the service gateway has been created successfully.
d. Click Close.
Under Resources, click Route Tables in the left navigation pane.
Click the Default Route Table from the list.
Click Add Route Rules and enter the following values:
a. Target Type: Service Gateway
b. Destination Service: All <region> Services in Oracle Services Network.
c. Target Service Gateway: PBT-BAS-SG-01
d. Description: Description for Service gateway route rule e. Click Add Route Rules
QUESTION NO: 4
you are part of security operation of an organization with thousand of your users accessing Oracle cloud infrastructure it was reported that an unknown user action was executedresulting in configuration error you are tasked to quickly identify the details of all users who were active in the last six hours also with any rest API call that were executed. Which oci feature should you use?
you are part of security operation of an organization with thousand of your users accessing Oracle cloud infrastructure it was reported that an unknown user action was executedresulting in configuration error you are tasked to quickly identify the details of all users who were active in the last six hours also with any rest API call that were executed. Which oci feature should you use?
Correct Answer: C
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 5
You have created several Oracle Cloud Infrastructure Groups with the prefix of 'Test' in your tenancy. For example TestECommerce, TestCatalog, and TestAdministration. You want to create another group called TestGroupsAdmin to manage all the groups that start with "Test" except for the group TestAdministration.? (Choose the best Answer.)
You have created several Oracle Cloud Infrastructure Groups with the prefix of 'Test' in your tenancy. For example TestECommerce, TestCatalog, and TestAdministration. You want to create another group called TestGroupsAdmin to manage all the groups that start with "Test" except for the group TestAdministration.? (Choose the best Answer.)
Correct Answer: B
QUESTION NO: 6
Which two are monitored by Cloud Guard in OCI, which can help with the overall security posture? (Choose two.)
Which two are monitored by Cloud Guard in OCI, which can help with the overall security posture? (Choose two.)
Correct Answer: A,D
QUESTION NO: 7
A programmer is developing a Node.js application which will run in a Linux server on their on-premises data center. This application will access various Oracle Cloud Infrastructure (OCI) services using OCI SDKs. What is the secure way to access OCI services with OCI Identity and Access Management (IAM)? (Choose the best Answer.)
A programmer is developing a Node.js application which will run in a Linux server on their on-premises data center. This application will access various Oracle Cloud Infrastructure (OCI) services using OCI SDKs. What is the secure way to access OCI services with OCI Identity and Access Management (IAM)? (Choose the best Answer.)
Correct Answer: B
QUESTION NO: 8
what is the use case for Oracle cloudinfrastructure logging analytics service?
what is the use case for Oracle cloudinfrastructure logging analytics service?
Correct Answer: D
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 9
Which Oracle Data Safe feature minimizes the amount of personal data and allows internal test, development, and analytics teams to operate with reduced risk?
Which Oracle Data Safe feature minimizes the amount of personal data and allows internal test, development, and analytics teams to operate with reduced risk?
Correct Answer: D
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 10
When configuring inter-tenancy virtual cloud network (VCN) peering using local peering gateways (LPG), which OCID do you need from the other tenancy to properly configure the Requestor and Acceptor identity Access Management (IAM) policies? (Choose the best Answer.)
When configuring inter-tenancy virtual cloud network (VCN) peering using local peering gateways (LPG), which OCID do you need from the other tenancy to properly configure the Requestor and Acceptor identity Access Management (IAM) policies? (Choose the best Answer.)
Correct Answer: A
