Oracle Oracle Certifications 1Z0-1104-22 Questions & Answers

• Question 61:

  Which VCNconfiguration is CORRECT with regard to VCN peering within a same region ?

  A. 12.0.0.0/16 and 194.168.0.0/16

  B. 12.0.0.0/16 and 12.0.0.0/16

  C. 194.168.0.0/24 and 194.168.0.0/24

  D. 194.168.0.0/24 and 194.168.0.0/16

  Correct Answer: A

• Question 62:

  A company needs to have somebuckets as public in the compartment. You want Cloud Guard to ignore the problem associated with public bucket. Select TWO correct answers

  A. Dismiss the issues associated with these resources

  B. Make the bucket private so that Cloud Guard won't detectit

  C. Configure Conditional groups for the detector to fix base line

  D. First make the bucket private and after few days make the bucket public again

  Correct Answer: AC

• Question 63:

  Which securityissues can be identified by Oracle Vulnerability Scanning Service? Select TWO correct answers

  A. Distributed Denial of Service (DDoS)

  B. Ports that are unintentionally left open can be a potential attack vector for cloud resources

  C. SQL Injection

  D. CISpublished Industry-standard benchmarks

  Correct Answer: BD

  

• Question 64:

  Which statement is true about origin management in WAF?

  Statement A: Multiple origins can be defined.

  Statement B: Only a single origin can be active fora WAF.

  A. Only statement B is true.

  B. Both the statements are false.

  C. Both the statements are true.

  D. Only statement A is true.

  Correct Answer: C

• Question 65:

  What is the matching rule syntax for a single condition?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

  

• Question 66:

  Which is NOT a compliance document?

  A. Certificate

  B. Penetration test report

  C. Attestation

  D. Bridge letter

  Correct Answer: B

  Types of Compliance Documents

  When viewing compliance documents, you can filter onthe following types:

  Attestation. A Payment Card Industry (PCI) Data Security Standard (DSS) Attestation of Compliance document.

  Audit. A general audit report.

  Bridge Letter (BridgeLetter). A bridge letter. Bridge letters provide compliance information forthe period of time between the end date of an SOC report and the date of the release of a new SOC report.

  Certificate. A document indicating certification by a particular authority, with regard to certification requirements and examination results conforming to said requirements.

  SOC3. A Service Organization Controls 3 audit report that provides information relating to a service organization's internal controls for security, availability, confidentiality, and privacy.

  Other. A compliance document that doesn't fit into any of the preceding, more specific categories.

  https://docs.oracle.com/en-us/iaas/Content/ComplianceDocuments/Concepts/compliancedocsoverview.htm

• Question 67:

  Which OCI cloud service lets you centrally manage the encryption keys thatprotect your data and the secret credentials that you use to securely access resources?

  A. Data Safe

  B. Cloud Guard

  C. Data Guard

  D. Vault

  Correct Answer: D

  Oracle Cloud Infrastructure Vault is a managed service that lets you centrally manage the encryption keysthat protect your data and the secret credentials that you use to securely access resources. Vaults securely store master encryption keys and secrets that you might otherwise store in configuration files or in code. Specifically, depending on the protection mode, keys are either stored on the server or they are stored on highly available and durable hardware security modules (HSM) that meet Federal Information Processing Standards (FIPS) 140-2 Security Level 3 security certification.

  https://docs.oracle.com/en-us/iaas/Content/KeyManagement/Concepts/keyoverview.htm

• Question 68:

  Which statement is true about Oracle Cloud Infrastructure (OCI) Object Storage server-side encryption?

  A. All the traffic to and from object storage is encrypted by using Transport Layer Security.

  B. Encryption is not enabled by default.

  C. Customer-provided encryption keys are never stored in OCI Vault service.

  D. Each object in a bucket is always encrypted with the same data encryption key.

  Correct Answer: A

• Question 69:

  When creating an OCI Vault, which factors may lead to select the Virtual Private Vault? Select TWO correct answers

  A. Need for more than 9211 key versions

  B. Greater degree of isolation

  C. To mask Pll data for non-production environment

  D. Ability to back up the vault

  Correct Answer: BD

  

• Question 70:

  Which type of software do you use to centrally distributeand monitor the patch level of systems throughout the enterprise?

  A. Network Monitor software

  B. Web Application Firewall

  C. Patch Management software

  D. Recovery Manager software

  Correct Answer: C

  https://docs.oracle.com/cd/E11857_01/em.111/e18710/T531901T535649.htm