Oracle Cloud Infrastructure 2025 Security Professional

QUESTION NO: 1
You have created a compartment TEST in your subscribed tenancy. Then, you created two groups, test1 and test2, and want the users in these groups to be able to manage all the resources in the TEST compartment.
Which policy would you use to achieve this?

A. Allow any-user to manage all resources in compartment test where request.group='test*' B. Allow group/test*/to manage all resources in compartment test. C. Allow group test1, test2 to manage all resources in compartment test. D. Allow any-user to manage all resources in compartment test where any {request.groups.test1, test2}

Correct Answer: C

QUESTION NO: 2
You are the first responder of a security incident for ABC Org. You have identified several IP addresses and URLs in the logs that you suspect may be related to the incident. However, you need more information to confidently determine whether they are indeed malicious or not.
Which OCI service can you use to obtain a more refined information and confidence score for these identified indicators?

A. OCI Incidence Responder B. OCI Web Application Firewall C. OCI Security Zones D. OCI Threat Intelligence

Correct Answer: D

QUESTION NO: 3
Based on the provided diagram, you have a group of critical compute instances in a private subnet that require vulnerability using the Oracle Cloud Infrastructure(OCI) Vulnerability Scanning Service (VSS).

"What additional configuration is required to enable VSS to scan instances in the private subnet

A. No additional configuration is needed. VSS can access private instances by default. B. Configure a service gateway in the VCN and a route rule to direct traffic for the VSS service through the gateway. C. Use an OCI Bastion session to establish connectivity and forward scan results from the private instances." D. VSS cannot scan private instances. You need to move them to a public subnet for vulnerability scanning.

Correct Answer: B

QUESTION NO: 4
An OCI administrator notices that a compute instance running in the production compartment is unable to create Object Storage buckets using the OCI CLI command:
oci os bucket create --name mybucket --compartment-id <compartment_OCID> --auth instance_principal The error message returned states:
"NotAuthorizedOrNotFound: You are not authorized to perform this action." The administrator verifies that the instance has Internet access and can reach OCI endpoints.
What then could be causing the issue?

A. The policy is written at the root compartment instead of the production compartment. B. The instance is not part of any Dynamic Group or the matching rule is incorrect. C. The instance is using the wrong OCI CLI authentication method. D. The bucket name is already in use, causing a conflict.

Correct Answer: B

Oracle Cloud Infrastructure 2025 Security Professional - 1z0-1104-25 Exam Questions