Oracle Oracle Certifications 1Z0-1104-22 Questions & Answers

• Question 31:

  What must be configured for a load balancer to accept incoming traffic?

  A. Service Gateway

  B. SSL certificate

  C. Listener

  D. Route table entry pointing to the listener IP address

  Correct Answer: C

  A listener is an entity that checks for connection requests. The load balancerlistener listens for ingress client traffic using the port you specify within the listener and the load balancer's public IP.

  https://docs.oracle.com/en-us/iaas/Content/GSG/Tasks/loadbalancing.htm To create a listener:

  On your Load Balancer Details page, click Listeners.

  Click Create Listener.

  Enter the following:

  Click Create.

• Question 32:

  Which statements are CORRECT about Multi-Factor Authentication in OCI ? Select TWO correct answers

  A. Members of the Administrators group can disable MFA for other users

  B. Users cannot enable MFA for themselves

  C. A user can registermultiple devices to use for MFA.

  D. Members of the Administrators group cannot enable MFA for another user

  Correct Answer: AD

  

  

• Question 33:

  You are part of security operation of an organization with thousand of your users accessing Oracle cloud infrastructure it was reported that an unknown user action was executedresulting in configuration error you are tasked to quickly identify

  the details of all users who were active in the last six hours also with any rest API call that were executed. Which oci feature should you use?

  A. service connector hub

  B. management agent log integration

  C. objectcollectionrule

  D. audit analysis dashboard

  Correct Answer: D

• Question 34:

  Which Cloud Guard component identifies issues with resources or user actions and alerts you when an issue is found?

  A. Problems

  B. Targets

  C. Detectors

  D. Responders

  Correct Answer: C

  Detector Performs checks to identify potential security problems based on activities or configurations. Rules followed to identify problems are the same for allcompartments in a target. https://docs.oracle.com/en-us/iaas/cloud-guard/using/part-start.htm

• Question 35:

  Which of the following is necessary step when creating a secret in vault?

  A. Vault-managed key is necessary to encrypt the secret

  B. Digest Hash shouldbe created of the secret value

  C. Object Storage must be created to run secret service

  D. Shamir's secret sharing algorithm should be used to unseal the vault

  Correct Answer: A

  https://docs.oracle.com/en/database/other- databases/essbase/21/essad/create-vault-and-secrets.html

• Question 36:

  Which statement is trueabout standards?

  A. They may be audited.

  B. They are result of a regulation or contractual requirement or an industry requirement.

  C. They are methods and instructions on how to maintain or accomplish the directives of the policy.

  D. They are the foundation of corporate governance.

  Correct Answer: B

• Question 37:

  You are using a custom application with third-party APIs to manage application and data hosted in an Oracle Cloud Infrastructure(OCI) tenancy. Although your third-party APIs don't support OCI's signature-based authentication, you want them to communicate with OCI resources. Which authentication option must you use to ensure this?

  A. OCI username and Password

  B. API Signing Key

  C. SSH Key Pair with 2048-bit algorithm

  D. Auth Token

  Correct Answer: D

• Question 38:

  Which three resources are required to encrypt a block volume with the customer managed key?

  A. MAXIMUM SECURITY ZONE

  B. SYMMETRIC MASTER KEY ENCRYPTlON KEY

  C. BLOCK KEY

  D. OCI VAIRT

  E. IAM Policy Allowing Block Storage to Use Keys

  F. Secrets

  Correct Answer: DEF

  https://docs.oracle.com/en-us/iaas/Content/SecurityAdvisor/Tasks/creatingsecureblockvolume.htm

• Question 39:

  An automobile company needs to configure Bastion Managed SSH session to a compute instance in a private subnet. What are the TWO prerequisites to configure successfully?

  A. NAT or Service Gateway should be attached to the private subnet

  B. There is no need for any gateway in private subnet

  C. SSH port forwarding should be enabled

  D. Route rule to a NAT or Service Gateway should be associated with the subnet of the route table

  Correct Answer: AD

• Question 40:

  You create a new compartment, "apps," to host some production apps and you create an apps_group and added users to it. What would you do to ensure the users have access to the apps compartment?

  A. Add an IAM policy for the individual users to access the apps compartment.

  B. Add an IAM policy for apps_group granting access to the apps compartment.

  C. Add an lAM policy to attach tenancy to the apps group.

  D. No action is required.

  Correct Answer: B