1z0-1104-21 Exam Training Practice Tests (Oracle Cloud Infrastructure Security 2021 Associate)]

Question 1

Which is NOT a part of Observability and Management Services?

A. Event Services B. Logging C. OCI Management Service D. Logging Analytics

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

With regard to OCI Audit Log Service, which of the statement is INCORRECT?

A. Events logged by the Audit service can be viewed by using the Console, API, or the SDK for Java B. REST API calls can be recorded by Audit service C. Retention period for audit events cannot be modified D. Audit Events gets collected when modification within objects stored in an Object Storage bucket

Correct Answer: D

Question 3

As a security administrator, you want to create cloud resources that align with Oracle's security principles and best practices. Which security service should you use?

A. Cloud Guard B. Security Advisor C. Web Application Firewall (WAF) D. Identity and Access Management

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

Which storage type is most effective when you want to move some unstructured data, consisting of images and videos, to cloud storage?

A. Block volume B. Standard storage C. Archive storage D. File storage

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

With regard to vulnerability and cloud penetration testing, which rules of engagement apply? Select TWO correct answers.

A. Any port scanning must be performed in an aggressive mode B. Testing should target any other subscription or any other Oracle Cloud customer resources C. You are responsible for any damages to Oracle Cloud customers that are caused by your testing activities D. Physical penetration and vulnerability testing of Oracle facilities is prohibited

Correct Answer: C,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

A company has OCI tenancy which has mount target associated with two File Systems, CG_1 and CG_2. These File Systems are accessed by IP-based clients AB_1 and AB_2 respectively. As a security administrator, how can you provide access to both clients such that CGI has Read only access on AB1 and CG_2 has Read/Write access on AB_2?

A. NFS Export Option B. Vault C. NFS v3 Unix Security D. Access Control Lists

Correct Answer: A,C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

How can you restrict access to OCI console from unknown IP addresses?

A. Create tenancy's authentication policy and add a network source B. Create PAR to restrict access the access C. Create tenancy's authentication policy and create WAF rules D. Make OCI resources private instead of public

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 8

Which Oracle Cloud Service provides restricted access to target resources?

A. Load balancer B. Bastion C. SSL certificate D. Internet Gateway

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 9

Which type of firewalls are designed to protect against web application attacks, such as SQL injection and cross-site scripting?

A. Stateful inspection firewall B. Web Application Firewall C. Incident firewall D. Packet filtering firewall

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 10

You have configured the Management Agent on an Oracle Cloud Infrastructure (OCI) Linux instance for log ingestion purposes.
Which is a required configuration for OCI Logging Analytics service to collect data from multiple logs of this Instance?

A. Source - Entity Association B. Entity - Log Association C. Log Group - Source Association D. Log - Log Group Association

Correct Answer: A

Oracle Cloud Infrastructure Security 2021 Associate - 1z0-1104-21 Exam Practice Test