[Apr 10, 2023] New 1z0-1104-22 Exam Dumps with High Passing Rate
Get 1z0-1104-22 Braindumps & 1z0-1104-22 Real Exam Questions
To earn the Oracle 1z0-1104-22 certification, candidates must pass a 105-minute exam consisting of 60 multiple-choice questions. The exam is available in English and Japanese and can be taken at any authorized testing center or online. Candidates who pass the exam will receive a digital badge and certificate, which they can use to showcase their expertise in OCI security to potential employers or clients.
To prepare for the Oracle 1z0-1104-22 certification exam, candidates can take advantage of various training resources offered by Oracle. These resources include online courses, training manuals, and practice exams. Additionally, candidates can gain hands-on experience by working with OCI and implementing security measures in a real-world environment. The exam itself consists of 60 multiple-choice questions that must be completed within 105 minutes. Candidates must earn a passing score of 70% or higher to obtain the certification.
NEW QUESTION # 33
What is the minimum active storage duration for logs used by Logging Analytics to be archived?
- A. 10 days
- B. 15 days
- C. 30 days
- D. 60 days
Answer: C
Explanation:
https://docs.oracle.com/en-us/iaas/logging-analytics/doc/manage-storage.html#:~:text=The%20minimum%20Active%20Storage%20Duration,be%20archived%20is%2030%20days.
The minimum Active Storage Duration (Days) for logs before they can be archived is 30 days.
NEW QUESTION # 34
With regard to OCI Audit Log Service, which of the statement is INCORRECT?
- A. REST API calls can be recorded by Audit service
- B. Retention period for audit events cannot be modified
- C. Events logged by the Audit service can be viewed by using the Console, API, or the SDK for Java
- D. Audit Events gets collected when modification within objects stored in an Object Storage bucket
Answer: D
NEW QUESTION # 35
You want to make API calls against other OCI services from your instance without configuring user credentials. How would you achieve this?
- A. Create a dynamic group and add your instance.
- B. Create a dynamic group and add a policy.
- C. No configuration is required for making API calls.
- D. Create a group and add a policy.
Answer: B
Explanation:
DYNAMIC GROUP
Dynamic groups allow you to group Oracle Cloud Infrastructure instances as principal actors, similar to user groups. You can then create policies to permit instances in these groups to make API calls against Oracle Cloud Infrastructure services. Membership in the group is determined by a set of criteria you define, called matching rules. https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/callingservicesfrominstances.htm
NEW QUESTION # 36
Which tasks can you perform on a dedicated virtual machine host?
- A. Capacity reservations
- B. Manual scaling
- C. Creating instance pools
- D. Instance configurations
Answer: B
Explanation:
Supported features: Most of the Compute features for VM instances are supported for instances running on dedicated virtual machine hosts. However, the following features are not supported:
Autoscaling
Capacity reservations
Instance configurations
Instance pools
Burstable instances
Reboot migration. You can use manual migration instead
https://docs.oracle.com/en-us/iaas/Content/Compute/Concepts/dedicatedvmhosts.htm#Dedicated_Virtual_Machine_Hosts
NEW QUESTION # 37
Which type of file system does file storage use?
- A. Paravirtualized
- B. NVMe
- C. iSCSI
- D. SSD
- E. NFSv3
Answer: E
Explanation:
The File Storage service supports the Network File System version 3.0 (NFSv3) protocol. The service supports the Network Lock Manager (NLM) protocol for file locking functionality.
https://docs.oracle.com/en-us/iaas/Content/File/Concepts/filestorageoverview.htm
NEW QUESTION # 38
Which security issues can be identified by Oracle Vulnerability Scanning Service? Select TWO correct answers
- A. SQL Injection
- B. Distributed Denial of Service (DDoS)
- C. Ports that are unintentionally left open can be a potential attack vector for cloud resources
- D. CIS published Industry-standard benchmarks
Answer: C,D
Explanation:
NEW QUESTION # 39
You want to include all instances in any of two or more compartments, which syntax should you use for dynamic policy you want to create for "Prod" compartment and "SIT" compartment?
Prod OCID : 'JON.Prod'
SIT OCID : 'JON.SIT'
- A. Any { instance in compartment 'Prod' and Compartment 'SIT' }
- B. All { instance.compartment.id = 'JON.Prod', instance.compartment.id = 'JON.SIT'
- C. All { instance in compartment 'Prod' and Compartment 'SIT' }
- D. Any { instance.compartment.id = 'JON.Prod', instance.compartment.id = 'JON.SIT'
Answer: D
Explanation:
NEW QUESTION # 40
Logical isolation for resources is provided by which OCI feature?
- A. Tenancy
- B. Compartments
- C. Availability Zone
- D. Region
Answer: B
NEW QUESTION # 41
VCN Flow log record details about the traffic that has been denied or approved is based on which of the following statements?
- A. Auth tokens
- B. Security Lists or Network Security Group Rules
- C. Configuration of route table
- D. Web Application Firewall (WAF)
Answer: B
Explanation:
NEW QUESTION # 42
Which statement about Oracle Cloud Infrastructure Multi-Factor Authentication (MFA) is NOT valid?
- A. An administrator can disable MFA for another user.
- B. Users cannot disable MFA for themselves.
- C. Users must install a supported authenticator app on the mobile device they intend to register for MFA.
- D. A user can register only one device to use for MFA.
Answer: B
NEW QUESTION # 43
As a security administrator, you want to create cloud resources that align with Oracle's security principles and best practices. Which security service should you use?
- A. Identity and Access Management
- B. Security Advisor
- C. Web Application Firewall (WAF)
- D. Cloud Guard
Answer: B
Explanation:
NEW QUESTION # 44
Which statements are CORRECT about Multi-Factor Authentication in OCI ? Select TWO correct answers
- A. Members of the Administrators group can disable MFA for other users
- B. Members of the Administrators group cannot enable MFA for another user
- C. Users cannot enable MFA for themselves
- D. A user can register multiple devices to use for MFA.
Answer: A,B
Explanation:
NEW QUESTION # 45
Cloud Guard detected a risk score of zero in the dashboard, what does this mean ?
- A. No problem detected for any resource
- B. Larger number of problems that have high risk levels ( HIGH or CRITICAL )
- C. Risk score doesn't say anything. These are just numbers
- D. LOW or MINOR issues
Answer: A
Explanation:
NEW QUESTION # 46
In which two ways can you improve data durability in Oracle Cloud Infrastructure Object Storage?
- A. Setup volumes in a RAID1 configuration
- B. Enable client-side encryption
- C. Limit delete permissions
- D. Enable server-side encryption
- E. Enable Versioning
Answer: A
NEW QUESTION # 47
As a security architect, how can you prevent unwanted bots while desirable bots are allowed to enter?
- A. Vault
- B. Compartments
- C. Web Application Firewall (WAF)
- D. Data Guard
Answer: C
NEW QUESTION # 48
A company has OCI tenancy which has mount target associated with two File Systems, CG_1 and CG_2. These File Systems are accessed by IP-based clients AB_1 and AB_2 respectively. As a security administrator, how can you provide access to both clients such that CGI has Read only access on AB1 and CG_2 has Read/Write access on AB_2?
- A. NFS v3 Unix Security
- B. Vault
- C. NFS Export Option
- D. Access Control Lists
Answer: A,C
Explanation:
NEW QUESTION # 49
Which OCI cloud service lets you centrally manage the encryption keys that protect your data and the secret credentials that you use to securely access resources?
- A. Data Safe
- B. Vault
- C. Data Guard
- D. Cloud Guard
Answer: B
Explanation:
Oracle Cloud Infrastructure Vault is a managed service that lets you centrally manage the encryption keys that protect your data and the secret credentials that you use to securely access resources. Vaults securely store master encryption keys and secrets that you might otherwise store in configuration files or in code. Specifically, depending on the protection mode, keys are either stored on the server or they are stored on highly available and durable hardware security modules (HSM) that meet Federal Information Processing Standards (FIPS) 140-2 Security Level 3 security certification.
https://docs.oracle.com/en-us/iaas/Content/KeyManagement/Concepts/keyoverview.htm
NEW QUESTION # 50
A member of operations team has set Pre-Authenticated Request (PAR) associated with a bucket to an incorrect date and now wants to edit the PAR request. How can this be achieved?
- A. Don't set an expiration time for PAR
- B. Delete both PAR as well as the bucket then recreate both
- C. Delete the PAR and recreate it with the required date
- D. Delete the bucket associated with PAR and recreate it
Answer: C
Explanation:
NEW QUESTION # 51
Select the component that encompasses the overall configuration of your WAF service on OCI.
- A. Bot Management
- B. Origin
- C. Protection rules
- D. Web Application Firewall policy
Answer: D
Explanation:
WAF Policy Management
Provides an overview of web application firewall (WAF) policies, including their creation, updating, and deletion.
WAF policies encompass the overall configuration of your WAF service, including access rules, rate limiting rules, and protection rules.
https://docs.oracle.com/en-us/iaas/Content/WAF/Policies/waf-policy_management.htm
NEW QUESTION # 52
You have configured the Management Agent on an Oracle Cloud Infrastructure (OCI) Linux instance for log ingestion purposes.
Which is a required configuration for OCI Logging Analytics service to collect data from multiple logs of this Instance?
- A. Source - Entity Association
- B. Log - Log Group Association
- C. Log Group - Source Association
- D. Entity - Log Association
Answer: A
NEW QUESTION # 53
Which component helps move logging data to other services, such as archiving log data in object storage?
- A. Unified Monitoring Agent
- B. Agent Configuration
- C. Service Log Category
- D. Service Connector Hub
Answer: D
Explanation:
Service Connector Hub
Service Connector Hub moves logging data to other services in Oracle Cloud Infrastructure. For example, use Service Connector Hub to alarm on log data, send log data to databases, and archive log data to Object Storage. For more information, see Service Connector Hub.
https://docs.oracle.com/en-us/iaas/Content/Logging/Concepts/loggingoverview.htm
NEW QUESTION # 54
which two responsibilities will be oracle when you move your it infrastructure to oracle cloud infrastructure?
- A. Strong IAM Framework
- B. Strong Isolation
- C. PROVIDING STRONG SECURITY LIST
- D. ACCOUNT ACCESS MANAGEMENT
- E. MAINTAINING CUSTOMER DATA
Answer: A,B
NEW QUESTION # 55
As a solutions architect, you need to assist operations team to write an I AM policy to give users in group-uat1 and group- uat2 access to manage all resources in the compartment Uat. Which is the CORRECT IAM policy ?
- A. Allow any-user to manage all resources in compartment Uat where request.group=/group-uat/*
- B. Allow group group-uat1 group-uat2 to manage all resources in compartment Uat
- C. Allow group /group-uat*/ to manage all resources in compartment Uat
- D. Allow any-user to manage all resources in tenancy where target.compartment= Uat
Answer: B
NEW QUESTION # 56
Which statement is true about Oracle Cloud Infrastructure (OCI) Object Storage server-side encryption?
- A. All the traffic to and from object storage is encrypted by using Transport Layer Security.
- B. Customer-provided encryption keys are never stored in OCI Vault service.
- C. Encryption is not enabled by default.
- D. Each object in a bucket is always encrypted with the same data encryption key.
Answer: A
NEW QUESTION # 57
......
1z0-1104-22 Dumps To Pass Oracle Exam in 24 Hours - TestKingFree: https://ensurepass.testkingfree.com/Oracle/1z0-1104-22-practice-exam-dumps.html