Demo Preview

1Z0-1104-26 Safe Question Preview

This public preview shows limited demo-safe questions only. Correct answers, full explanations, paid-only media, private IDs, and attempt data are not included.

Implementing Network, Platform, and Infrastructure SecurityManaging Identity and AccessMultiple ChoiceMulti Select
Start Interactive DemoExam Landing Page

Preview Questions

Multiple ChoiceImplementing Network, Platform, and Infrastructure Security
Question 1. In Oracle Cloud Infrastructure (OCI), bare metal instances provide customers with direct access to the underlying hardware. To mitigate security risks when a customer terminates a bare metal instance, OCI utilizes Root-of-Trust hardware. What is the primary function of the Root-of-Trust hardware in this context?
A. It automatically encrypts data at rest on the bare metal instance.
B. It ensures all non-volatile memory on the terminated instance is securely wiped before reuse.
C. It guarantees complete isolation between customer workloads on different instances.
D. It eliminates the need for hypervisors, reducing the potential attack surface.
Open safe question previewReport Question
Multiple ChoiceImplementing Network, Platform, and Infrastructure Security
Question 2. Based on the provided diagram, you have a group of critical compute instances in a private subnet that require vulnerability using the Oracle Cloud Infrastructure (OCI) Vulnerability Scanning Service (VSS). "What additional configuration is required to enable VSS to scan instances in the private subnet
A. VSS cannot scan private instances. You need to move them to a public subnet for vulnerability scanning.
B. Configure a service gateway in the VCN and a route rule to direct traffic for the VSS service through the gateway.
C. No additional configuration is needed. VSS can access private instances by default.
D. Use an OCI Bastion session to establish connectivity and forward scan results from the private instances."
Open safe question previewReport Question
Multiple ChoiceImplementing Network, Platform, and Infrastructure Security
Question 3. When trying to encrypt plaintext using Command Line Interface (CLI), the developer gets a Service Error. This is the command the developer tried to run: What is the reason for this error?
A. The developer forgot to specify the region.
B. The user should pass the key version OCID instead of the key OCID.
C. The developer has the wrong endpoint.
D. The plaintext needs to be in JSON form.
Open safe question previewReport Question
Multiple ChoiceManaging Identity and Access
Question 4. "A programmer is developing a Node.js application which will run on a Linux server on their on- premises data center. This application will access various Oracle Cloud Infrastructure (OCI) services using OCI SDKs. What is the secure way to access OCI services with OCI Identity and Access Management (IAM)?
A. Create a new OCI IAM user, add the user to a group associated with a policy that grants the desired permissions to OCI services. In the on-premises Linux server, add the user name and password to a file used by Node.js authentication.
B. Create a new OCI IAM user, add the user to a group associated with a policy that grants the desired permissions to OCI services. In the on-premises Linux server, generate the keypair used for signing API requests and upload the public key to the IAM user.
C. Create a new OCI IAM user associated with a dynamic group and a policy that grants the desired permissions to OCI services. Add the on-premises Linux server in the dynamic group.
D. Create an OCI IAM policy with appropriate permissions to access the required OCI services and assign the policy to the on-premises Linux server."
Open safe question previewReport Question
Multi SelectImplementing Network, Platform, and Infrastructure Security
Question 5. A company is securing its compute instances (VMs and Bare Metal Machines) in Oracle Cloud infrastructure (OCI) using a network firewall. As shown in the diagram, traffic flows from the internet Gateway (IGW) to the firewall in the Public DMZ Subnet, and then to the compute instances in the Public Subnet. When configuring security lists and network security groups (NSGs) in this setup, what should they consider?
A. If the policy used with the firewall has no rules specified, the firewall allows all traffic.
B. Ensure that any security list or NSG rules allow the traffic to enter the firewall for appropriate evaluation.
C. Add stateful rules to the security list attached to the firewall subnet or include the firewall in an NSG containing stateful rules for better performance.
D. Security list and NSG rules associated with the firewall subnet and VNICs are evaluated after the firewall.
Open safe question previewReport Question