1z0-1104-23 by Oracle Valid Free Exam Practice Test

Question 1

You have three compartments: ProjectA, ProjectB, and ProjectC. For each compartment, there is an admin group set up: A-Admins, B-Admins, and C-Admins. Each admin group has full access over their respective compartments as shown in the graphic below. Your organization has set up a tag namespace, EmployeeGroup.Role and all your admin groups are tagged with a value of 'Admin'.
You want to set up a "Test" compartment for members of the three projects to share, and need to give admin aress to all three of your existing admin groups. Which policy should you write to accomplish this task? (Choose the best Answer.)

A. Allow any-users to manage all-resources in compartment Test where re-quest.principal.group.tag.EmployeeGroup.Role=Admin B. Allow group any-group to manage all-resources in compartment Test where re-quest.principal.group.tag.EmployeeGroup.Role=Admin C. Allow any-group to manage all-resources in compartment Test where re-quest.principal.group.tag.EmployeeGroup.Role=Admin D. Allow all-group to manage all-resources in compartment Test where re-quest.principal.group.tag.EmployeeGroup.Role=Admin

Correct Answer: C

Question 2

Which two responsibilities must be taken care of by a customer while managing Web Application Firewall (WAF)? (Choose two.)

A. Patch their WAF instance when Oracle makes faxes available. B. Provide High Availability (HA) for the WAF edge nodes. C. Tune WAF's access rules and bot management strategies according to the web application traffic D. Import new Open Web Application Security Project (OWASP) Core Rule Sets (CRS) as they are released E. Onboard and configure the WAF policy for the web application

Correct Answer: C,E

Question 3

In which two ways can you improve data durability in Oracle Cloud Infrastructure Object Storage?

A. Limit delete permissions B. Enable Versioning C. Enable client-side encryption D. Enable server-sideencryption E. Setup volumes in a RAID1 configuration

Correct Answer: A,B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 4

You are a cloud Security administrator for a company. You are trying to create a dynamic rule that will match all instances in compartment "Test", with the OCID 'ocidl.compartment.ocl.lksnvkjnfbvrkblskivrIvruincbvbeidcbwvvyrsvi and a "Dev" compartment with OCID 'ocidl.compartment.ocl.kjsnfjkvskjfbvsbvsgljvndbblgjdnurvswrjnvljjeeft. What is the correct dynamic policy that will fulfill this request? (Choose the best Answer.)

A. All {Instance.id=tocidtinstance.ocl.eu-frankfurt-Lnsvwradccnksvkkdumcsnvurlsnvnuw"} B. All {compartment. name="Test", compartment.name="Dev"} C. Any {instance.compartment.id = 'ocidl.compartment.ocl.lksnvkjnfbvrkblskjvrIvruincbvbeidcbwvvyrsvi, in-stance.compartment.id = 'ocidl.compartment.ocl.kjsnfjkvskjfbvsbvsgljvndbblgjdnurvswrjnvijjeee} D. All {Instances in Compartment "Test" and Compartment "Dev"}

Correct Answer: C

Question 5

What does an audit log event include?

A. Footer B. Header C. Audit type D. Type of input

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 6

A member of operations team has set Pre-Authenticated Request (PAR) associated with a bucket to an incorrect date and now wants to edit the PARrequest. How can this be achieved?

A. Delete both PAR as well as the bucket then recreate both B. Delete the PAR and recreate it with the required date C. Don't set an expiration time for PAR D. Delete the bucket associated with PAR and recreate it

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 7

How can you limit access to an Oracle Cloud Infrastructure (OCI) Object Storage bucket to only the users Hark for within the corporate network? (Choose the best Answer.)

A. Create an Identity and Access Management (TAM) policy and add a group that contains all the Internal computers B. Make the bucket private and limit the access using Security Lists C. Create an identity and Access Management (IAM) policy and add a network source that has the corporate network classless inter-domain routings (CIDR). D. Create pre authenticated request (PAR) that limits access to the corporate network CIDRS.

Correct Answer: C

Question 8

Which two services can leverage Vault symmetric encryption keys for data-at-rest? (Choose two.) OR Which OCI services can encrypt all data-at-rest? (Choose two.)

A. CDN B. API Gateway C. Object Storage D. WAF E. Load Balancer F. Block Volume

Correct Answer: C,F

Question 9

You need to set up instance principals so that an application running on an Oracle Cloud Infrastructure (OCI) instance can call public OCI services, without the need to configure user credentials. A developer in your team has already configured the application to authenticate using the instance principals provider. Which is NOT a necessary step to complete this set up? (Choose the best Answer.)

A. Deploy the application to all the instances that belong to the dynamic group B. Create a dynamic group with matching rules to specify which instances you want to al-low to make API calls against services. C. Generate Auth Tokens to enable instances in the dynamic group to authenticate with APIs. D. Create a policy granting permissions to the dynamic group to access services in your compartment or tenancy

Correct Answer: C

Oracle Cloud Infrastructure 2023 Security Professional - 1z0-1104-23 Exam Practice Test