Apr-2022 Realistic 1z0-1104-21 Exam Dumps with Accurate & Updated Questions [Q15-Q38]

4.6/5 - (11 votes)

Apr-2022 Realistic 1z0-1104-21 Exam Dumps with Accurate & Updated Questions

1z0-1104-21 Exam Dumps – PDF Questions and Testing Engine

NEW QUESTION 15
As a security administrator, you want to create cloud resources that align with Oracle’s security principles and best practices. Which security service should you use?

Identity and Access Management

Cloud Guard

Security Advisor

Web Application Firewall (WAF)

NEW QUESTION 16
Which OCI service can index, enrich, aggregate, explore, search, analyze, correlate, visualize and monitor data?

Data Guard

Data Safe

WAF

Logging Analytics

NEW QUESTION 17
Which statements are CORRECT about Security Zone policy in OCI ? Select TWO correct answers

Block volume can be moved from a security zone to a standard compartment

Bucket can’t be moved from a security zone to a standard compartment

Resources in a security zone must be accessible from internet

Resources in a security zone must be encrypted using customer-managed keys

NEW QUESTION 18
Which Security Zone policy is NOT valid?

A boot volume can be moved from a security zone to a standard compartment.

A compute instance cannot be moved from a security zone to a standard compartment.

Resources in a security zone should not be accessible from the public internet.

Resources in a security zone must be automatically backed up regularly.

NEW QUESTION 19
You want software that can automatically collect and aggregate log data generated throughout your organization’s infrastructure, analyze it, and send alerts if it detects a deviation from the norm.
Which software must you use?

Security Information Management (SIM)

Security Event Management (SEM)

Security Integration Management (SIM)

Security Information and Event Management (SIEM)

NEW QUESTION 20
you are part of security operation of an organization with thousand of your users accessing Oracle cloud infrastructure it was reported that an unknown user action was executed resulting in configuration error you are tasked to quickly identify the details of all users who were active in the last six hours also with any rest API call that were executed. Which oci feature should you use?

service connector hub

management agent log integration

objectcollectionrule

audit analysis dashboard

NEW QUESTION 21
Which type of software do you use to centrally distribute and monitor the patch level of systems throughout the enterprise?

Network Monitor software

Web Application Firewall

Patch Management software

Recovery Manager software

NEW QUESTION 22
You have configured the Management Agent on an Oracle Cloud Infrastructure (OCI) Linux instance for log ingestion purposes.
Which is a required configuration for OCI Logging Analytics service to collect data from multiple logs of this Instance?

Log – Log Group Association

Entity – Log Association

Source – Entity Association

Log Group – Source Association

NEW QUESTION 23
An automobile company needs to configure Bastion Managed SSH session to a compute instance in a private subnet. What are the TWO prerequisites to configure successfully?

NAT or Service Gateway should be attached to the private subnet

There is no need for any gateway in private subnet

SSH port forwarding should be enabled

Route rule to a NAT or Service Gateway should be associated with the subnet of the route table

NEW QUESTION 24
Which parameters customers need to configure while reading secrets by name using CL1 or API? Select TWO correct answers.

Certificates

Secret Name

ASCII Value

Vault Id

NEW QUESTION 25
A number of malicious requests for a web application is coming from a set of IP addresses originating from Antartic a.
Which of the following statement will help to reduce these types of unauthorized requests ?

Delete NAT Gateway from Virtual Cloud Network

Use WAF policy using Access Control Rules

List specific set of IP addresses then deny rules in Virtual Cloud Network Security Lists

Change your home region in which your resources are currently deployed

NEW QUESTION 26
Operations team has made a mistake in updating the secret contents and immediately need to resume using older secret contents in OCI Secret Management within a Vault.
As a Security Administrator, what step should you perform to rollback to last version? Select TWO correct answers.

Mark the secret version as ‘deprecated’

Mark the secret version as ‘Previous’

Mark the secret version as ‘Rewind’

Upload new secret and mark as ‘Pending’. Promote this secret version as ‘Current’

NEW QUESTION 27
With regard to OCI Audit Log Service, which of the statement is INCORRECT?

Retention period for audit events cannot be modified

REST API calls can be recorded by Audit service

Audit Events gets collected when modification within objects stored in an Object Storage bucket

Events logged by the Audit service can be viewed by using the Console, API, or the SDK for Java

NEW QUESTION 28
As a lead Security Architect, you have tasked to restrict access to and from the worker nodes in pods running in Oracle Container Engine for Kubernetes?

Cloud Guard

Vulnerability Scanning

Security Lists

Identity and Access Management

NEW QUESTION 29
Which Oracle Cloud Service provides restricted access to target resources?

Bastion

Internet Gateway

Load balancer

SSL certificate

NEW QUESTION 30
you want to create a stateless rule for SSH in security list and the ingress role has already been properly configured what combination should you use on the engress role what commination should you use on the egress rule?

select udp for protocol: enter 22 for source port” and all for destination port

select tcp for protocol: enter 22 for source port” and 22 for destination port

select tcp for protocol: enter all for source port” and 22 for destination port.

select tcp for protocol: enter 22 for source port” and all for destination port

NEW QUESTION 31
Which WAF service component must be configured to allow, block, or log network requests when they meet specified criteria?

Protection rules

Bot Management

Origin

Web Application Firewall policy

NEW QUESTION 32
Which Oracle Data Safe feature minimizes the amount of personal data and allows internal test, development, and analytics teams to operate with reduced risk?

data auditing

data encryption

security assessment

data masking

data discovery

NEW QUESTION 33
As a security administrator, you found out that there are users outside your co network who are accessing OCI Object Storage Bucket. How can you prevent these users from accessing OCI resources in corporate network?

Create an 1AM policy and create WAF rules

Create an 1AM policy and add a network source

Make OCI resources private instead of public

Create PAR to restrict access the access

NEW QUESTION 34
Which OCI cloud service lets you centrally manage the encryption keys that protect your data and the secret credentials that you use to securely access resources?

Data Safe

Cloud Guard

Data Guard

Vault

NEW QUESTION 35
Which tasks can you perform on a dedicated virtual machine host?

Manual scaling

Creating instance pools

Instance configurations

Capacity reservations

NEW QUESTION 36
Which type of file system does file storage use?

NFSv3

iSCSI