1z0-1104-22 Exam Training Practice Tests (Oracle Cloud Infrastructure 2022 Security Professional)]

Question 1

Which security issues can be identified by Oracle Vulnerability Scanning Service? Select TWO correct answers

A. Ports that are unintentionally left open can be a potential attack vector for cloud resources B. Distributed Denial of Service (DDoS) C. SQL Injection D. CIS published Industry-standard benchmarks

Correct Answer: A,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

How can you establish private connectivity over two VCN within same OCI region without traversing the traffic over public internet ?

A. Remote VCN Peering B. Local VCN Peering C. Data Guard D. NAT Gateway

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

For how long are API calls audited and available?

A. 365 days B. 30 days C. 60 days D. 90 days

Correct Answer: D

Question 4

Select the component that encompasses the overall configuration of your WAF service on OCI.

A. Bot Management B. Web Application Firewall policy C. Origin D. Protection rules

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

Which statements are CORRECT about Multi-Factor Authentication in OCI ? Select TWO correct answers

A. A user can register multiple devices to use for MFA. B. Members of the Administrators group cannot enable MFA for another user C. Members of the Administrators group can disable MFA for other users D. Users cannot enable MFA for themselves

Correct Answer: B,C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

Which is NOT a part of Observability and Management Services?

A. Event Services B. Logging C. OCI Management Service D. Logging Analytics

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

Which Oracle Data Safe feature minimizes the amount of personal data and allows internal test, development, and analytics teams to operate with reduced risk?

A. security assessment B. data discovery C. data encryption D. data masking E. data auditing

Correct Answer: D

Question 8

Which of the following is necessary step when creating a secret in vault?

A. Digest Hash should be created of the secret value B. Object Storage must be created to run secret service C. Shamir's secret sharing algorithm should be used to unseal the vault D. Vault-managed key is necessary to encrypt the secret

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 9

Which of these protects customer data at rest and in transit in a way that allows customers to meet their security and compliance requirements for cryptographic algorithms and key management?

A. Security controls B. Identity Federation C. Data encryption D. Customer isolation

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 10

Which statement is true about Oracle Cloud Infrastructure (OCI) Object Storage server-side encryption?

A. Customer-provided encryption keys are never stored in OCI Vault service. B. Each object in a bucket is always encrypted with the same data encryption key. C. All the traffic to and from object storage is encrypted by using Transport Layer Security. D. Encryption is not enabled by default.

Correct Answer: C

Oracle Cloud Infrastructure 2022 Security Professional - 1z0-1104-22 Exam Practice Test