2022 The Most Effective 1z0-1104-22 with 95 Questions Answers [Q18-Q37] : Free Exams Dumps Materials : http://exams.dumpsmaterials.com

QUESTION 18
What would you use to make Oracle Cloud Infrastructure Identity and Access Management govern resources in a tenancy?

Policies

Users

Dynamic groups

Groups

QUESTION 19
You want to make API calls against other OCI services from your instance without configuring user credentials. How would you achieve this?

Create a dynamic group and add a policy.

Create a dynamic group and add your instance.

Create a group and add a policy.

No configuration is required for making API calls.

QUESTION 20
Logical isolation for resources is provided by which OCI feature?

Tenancy

Availability Zone

Region

Compartments

QUESTION 21
you are part of security operation of an organization with thousand of your users accessing Oracle cloud infrastructure it was reported that an unknown user action was executed resulting in configuration error you are tasked to quickly identify the details of all users who were active in the last six hours also with any rest API call that were executed. Which oci feature should you use?

service connector hub

management agent log integration

objectcollectionrule

audit analysis dashboard

QUESTION 22
How can you convert a fixed load balancer to a flexible load balancer?

There is no way to covert the load balancer.

Use Update Shape workflows.

Delete the fixed load balancer and create a new one.

Using the Edit Listener option.

QUESTION 23
Which is NOT a part of Observability and Management Services?

Event Services

OCI Management Service

Logging Analytics

Logging

QUESTION 24
Which of these protects customer data at rest and in transit in a way that allows customers to meet their security and compliance requirements for cryptographic algorithms and key management?

Security controls

Customer isolation

Data encryption

Identity Federation

QUESTION 25
your company has hired a consulting firm to audit your oracle cloud infrastructure activity and configuration you have created a set of users who will be performing the audit, you assigned these user to the orgauditgrp group. the auditor required the ability to see the configuration of all resources within tenant and you have agreed to exempt the dev compartment from the audit.
which IAM policy should be created to grant the orgauditgrp the ability to look at configuration for all resources except for those resources inside the dev compartment?

allow group orgauditgrp to read all-resources in tenancy where target.compartment.name !=dev

allow group orgauditgrp to read all-resources in compartment !=dev

allow group orgauditgrp to inspect all-resources in tenancy where target compartment.name !=dev

allow group orgauditgrp to inspect all-resources in compartment !=dev

QUESTION 26
With regard to vulnerability and cloud penetration testing, which rules of engagement apply? Select TWO correct answers.

Any port scanning must be performed in an aggressive mode

Physical penetration and vulnerability testing of Oracle facilities is prohibited

Testing should target any other subscription or any other Oracle Cloud customer resources

You are responsible for any damages to Oracle Cloud customers that are caused by your testing activities

QUESTION 27
What does the following identity policy do?
Allow group my-group to use fn-invocation in compartment ABC where target.function.id = ‘<function-OCID>’

Enables users in a group to create, update, and delete ALL applications and functions in a compartment

Enables users to invoke all the functions in a specific application

Enables users to invoke just one specific function

Enables users to invoke all the functions in a compartment except for one specific function

QUESTION 28
In which two ways can you improve data durability in Oracle Cloud Infrastructure Object Storage?

Setup volumes in a RAID1 configuration

Enable server-side encryption

Enable Versioning

Limit delete permissions

Enable client-side encryption

QUESTION 29
What is the minimum active storage duration for logs used by Logging Analytics to be archived?

60 days

10 days

30 days

15 days

QUESTION 30
As a security administrator, you found out that there are users outside your co network who are accessing OCI Object Storage Bucket. How can you prevent these users from accessing OCI resources in corporate network?

Create an 1AM policy and create WAF rules

Create an 1AM policy and add a network source

Make OCI resources private instead of public

Create PAR to restrict access the access

QUESTION 31
Bot Management in OCI provides which of the features? Select TWO correct answers.

Bad Bot Denylist

CAPTCHA Challenge

IP Prefix Steering

Good Bot Allowlist

QUESTION 32
What does an audit log event include?

Audit type

Header

Footer

Type of input

QUESTION 33
Which OCI services can encrypt all data-at-rest ? Select TWO correct answers

File Storage

NAT Gateway

Block Volumes

Geolocation Steering

QUESTION 34
Which type of software do you use to centrally distribute and monitor the patch level of systems throughout the enterprise?

Network Monitor software

Web Application Firewall

Patch Management software

Recovery Manager software

QUESTION 35
What must be configured for a load balancer to accept incoming traffic?

Service Gateway

SSL certificate

Listener

Route table entry pointing to the listener IP address

QUESTION 36
What are the security recommendations and best practices for Oracle Functions?

Grant privileges to UID and GID 1000, such that the functions running within a container acquire the default root capabilities.

Add applications to network security groups for fine-grained ingress/egress rules.

Define a policy statement that enables access to functions for requests coming from multiple IP addresses.

Ensure that functions in a VCN have restricted access to resources and services.

QUESTION 37
An automobile company needs to configure Bastion Managed SSH session to a compute instance in a private subnet. What are the TWO prerequisites to configure successfully?

NAT or Service Gateway should be attached to the private subnet

There is no need for any gateway in private subnet

SSH port forwarding should be enabled

Route rule to a NAT or Service Gateway should be associated with the subnet of the route table