1z0-1104-23 Exam Training Practice Tests (Oracle Cloud Infrastructure 2023 Security Professional)]

Question 1

Which securityissues can be identified by Oracle Vulnerability Scanning Service? Select TWO correct answers

A. Ports that are unintentionally left open can be a potential attack vector for cloud resources B. Distributed Denial of Service (DDoS) C. CISpublished Industry-standard benchmarks D. SQL Injection

Correct Answer: A,C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

You are tasked with building a highly available, fault tolerant web application for your current employer. The security team is concerned about an increase in malicious web-based attacks across the Internet and therefore wants to add a higher level of security to the website. How would you architect the solution in Oracle Cloud Infrastructure (OCI) to meet the security requirements defined by your organization? (Choose the best Answer.)

A. Deploy at least three web servers, each in a different fault domain in a public subnet. Use OCI Traffic Management service to create a load balancing policy to resolve DNS evenly between all web servers. B. Deploy at least three web servers, each in a different faut domain in a private subnet. Place a public load balancer in a public subnet and create a backend set for all the web servers Create Geolocation steering policy in OCI Traffic Management and add an answer pool that directs to the public IP address of the load balancer. C. Deploy at least three web servers, each in a different fault domain in a public subnet. Ensure that each web server is assigned a public IP address. Depley Web Application Firewall (WAS) and configure one origin for each public P address. D. Deploy at least three web servers, each in different faut domain using a regional private subnet. Place a public load balancer in a regional public subnet and create a backend set for all the web servers. \ E. Deploy Web Application Firewall (WAF) and configure the load balancer public IP address as the origin.

Correct Answer: C

Question 3

What would you use to make Oracle Cloud Infrastructure Identity and Access Management govern resources in a tenancy?

A. Groups B. Policies C. Users D. Dynamic groups

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

What information do youget by using the Network Visualizer tool?

A. Organization of subnets and VLANs across availability domains B. State of subnets in a VCN C. Interconnectivity of VCNs D. Routes defined between subnets and gateways

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

Which statement is true about standards?

A. They may be audited. B. They are result of a regulation or contractual requirement or an industry requirement. C. They are methods and instructions on how to maintain or accomplish the directives of the policy. D. They are the foundation of corporate governance.

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

For how long are API calls audited and available?

A. 365 days B. 30days C. 60 days D. 90 days

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

Challenge 3 - Task 2 of 4
Set Up a Bastion Host to Access the Compute Instance in a Private Subnet Scenario A compute instance is provisioned in a private subnet that is not accessible through the Internet. To access the compute instance resource in a private subnet, you must provide a time-bound SSH session without deploying and maintaining a public subnet and a jump server, which eliminates the hassle and potential attack surface from remote access.
To complete this deployment, you have to perform the following tasks in the environment provisioned for you:
* Configure a Virtual Cloud Network (VCN) and a Private Subnet.
* Provision a Compute Instance in the private subnet and enable Bastion Plugin.
* Create a Bastion and Bastion session.
* Connect to a compute instance using Managed SSH session.

Note: You are provided with access to an OCI Tenancy, an assigned compartment, and OCI credentials. Throughout your exam, ensure to use the assigned Compartment 99233424-C01 and Region us-ashburn-1 Complete the following tasks in the provisioned OCI environment:
Create a Compute Instance with the name PBT-BAS-VM-01, using the "Oracle Linux 8" image and shape "VM.Standard2.1", without SSH key and enable Bastion plugin.

Correct Answer:

See the solution below in Explanation
Explanation:
Solutions:
From the navigation menu, select Compute and then click Instances.
In the left navigation pane, select your working compartment under List Scope from the drop-down menu.
Click Create Instance. In the Create Instance dialogue box, provide the following details:
a. Name: PBT-BAS-VM-01
b. Placement: Select Availability Domain AD.
c. Image: Select the image Oracle Linux 8.
d. Shape: Click Change shape > Select Ampere shape series > Select VM.Standard2.1.
e. Click Select Shape to return to the Create compute instance window.
f. Networking: Pick your PBT-BAS-VCN-01 and Private Subnet.
g. Public IP address: Do not assign a Public IPv4 address.
h. Add SSH keys: Do not add any SSH key.
i. Note: Leave all the other options in their default setting.
j. Click Show Advanced Options.
On the Oracle Cloud Agent tab, select Bastion.
Click Create. (Click Yes, and create an instance on the "No SSH access" prompt) After a few minutes, you can see that the instance has been successfully created, and the state is Running.
Click the Oracle Cloud Agent tab on the instance details page.
Toggle the Enable Plugin switch to Enable for the Bastion plug-in, if the switch is disabled.
It can take 5-10 minutes for the change to take effect. After a few moments, the status of the Running for the Bastion-enabled service will be displayed.

Question 8

You are using a custom application with third-party APIs to manage application and data hosted in an Oracle Cloud Infrastructure (OCI) tenancy. Although your third-party APIs do not support OCI's signature-based authentication, you want them to communicate with OCI resources Which authentication option should you use to ensure this? (Choose the best Answer.)

A. Auth Tokens B. SSH Kay Par with 2048-bit algorithm C. At Signing Key D. OCI Username and password

Correct Answer: A

Question 9

Which of the following is necessary step when creating a secret in vault?

A. Digest Hash shouldbe created of the secret value B. Object Storage must be created to run secret service C. Shamir's secret sharing algorithm should be used to unseal the vault D. Vault-managed key is necessary to encrypt the secret

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 10

As a security administrator, you want to create cloud resources that alignwith Oracle's security principles and best practices. Which security service should you use?

A. Cloud Guard B. Security Advisor C. Web Application Firewall (WAF) D. Identity and Access Management

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 11

Which three Oracle Cloud Infrastructure (OCI) services are covered by Cloud Guard? (Choose three.)

A. Identity and Access Management (IAM) B. Database Cloud Service C. Object Storage D. Blockchain E. Oracle Integration Osud (OIC)

Correct Answer: A,B,C

Oracle Cloud Infrastructure 2023 Security Professional - 1z0-1104-23 Exam Practice Test