[Oct 22, 2022] Latest Questions 1z0-1104-21 Guide to Prepare Free Practice Tests
Reliable 1z0-1104-21 Dumps Questions Available as Web-Based Practice Test Engine
NEW QUESTION 32
your company has hired a consulting firm to audit your oracle cloud infrastructure activity and configuration you have created a set of users who will be performing the audit, you assigned these user to the orgauditgrp group. the auditor required the ability to see the configuration of all resources within tenant and you have agreed to exempt the dev compartment from the audit.
which IAM policy should be created to grant the orgauditgrp the ability to look at configuration for all resources except for those resources inside the dev compartment?
- A. allow group orgauditgrp to inspect all-resources in compartment !=dev
- B. allow group orgauditgrp to read all-resources in tenancy where target.compartment.name !=dev
- C. allow group orgauditgrp to inspect all-resources in tenancy where target compartment.name !=dev
- D. allow group orgauditgrp to read all-resources in compartment !=dev
Answer: C
NEW QUESTION 33
When does Cloud Guard re-open an issue and update the history?
- A. If it detects an issue again for an Open (unresolved) problem
- B. If it detects an issue for a previously resolved/dismissed activity problem
- C. If it detects an issue for a previously dismissed configuration problem
- D. If it detects an issue for a previously resolved configuration problem
Answer: D
Explanation:
If Cloud Guard detects an issue again for:
An Open (unresolved) problem, it updates the problem history, but doesn't create a new problem.
A previously solved problem, it reopens the issue and updates the history.
A previously dismissed problem, it updates the history.
https://docs.oracle.com/en-us/iaas/cloud-guard/using/problems-page.htm
NEW QUESTION 34
Where are logs stored?
- A. Cloud Agent
- B. OCI Object Storage
- C. OCI File Storage
- D. OCI Block Storage
Answer: B
Explanation:
You can collect log data continuously from Oracle Cloud Infrastructure (OCI) Object Storage. To enable the log collection, create ObjectCollectionRule resource using REST API or CLI. After the successful creation of this resource and having the required IAM policies, the log collection will be initiated.
https://docs.oracle.com/en-us/iaas/logging-analytics/doc/collect-logs-your-oci-object-storage-bucket.html
NEW QUESTION 35
What is the matching rule syntax for a single condition?
- A. Option C
- B. Option D
- C. Option B
- D. Option A
Answer: A
Explanation:
NEW QUESTION 36
Which Oracle Cloud Service provides restricted access to target resources?
- A. Bastion
- B. SSL certificate
- C. Internet Gateway
- D. Load balancer
Answer: A
Explanation:
Bastion
Oracle Cloud Infrastructure Bastion provides restricted and time-limited access to target resources that don't have public endpoints.
https://docs.oracle.com/en-us/iaas/Content/Security/Concepts/security_features.htm
NEW QUESTION 37
Which of these protects customer data at rest and in transit in a way that allows customers to meet their security and compliance requirements for cryptographic algorithms and key management?
- A. Data encryption
- B. Identity Federation
- C. Customer isolation
- D. Security controls
Answer: A
Explanation:
DATA ENCRYPTION
Protect customer data at-rest and in-transit in a way that allows customers to meet their security and compliance requirements for cryptographic algorithms and key management.
https://docs.oracle.com/en-us/iaas/Content/Security/Concepts/security_overview.htm
NEW QUESTION 38
what is the use case for Oracle cloud infrastructure logging analytics service?
- A. automatically and manage any log based on a subscription model
- B. monitors, aggregates, indexes and analyzes all log data from on-premises.
- C. labels data packets that pass through the internet gateway
- D. automatically create instances to collect logs analysis and send reports
Answer: B
Explanation:
Oracle Cloud Infrastructure Logging Analytics is a machine learning-based cloud service that monitors, aggregates, indexes, and analyzes all log data from on-premises and multicloud environments. Enabling users to search, explore, and correlate this data to troubleshoot and resolve problems faster and derive insights to make better operational decisions.
https://www.oracle.com/manageability/logging-analytics/
NEW QUESTION 39
Which OCI services can encrypt all data-at-rest ? Select TWO correct answers
- A. NAT Gateway
- B. Block Volumes
- C. Geolocation Steering
- D. File Storage
Answer: B,D
Explanation:
NEW QUESTION 40
You want to include all instances in any of two or more compartments, which syntax should you use for dynamic policy you want to create for "Prod" compartment and "SIT" compartment?
Prod OCID : 'JON.Prod'
SIT OCID : 'JON.SIT'
- A. Any { instance in compartment 'Prod' and Compartment 'SIT' }
- B. Any { instance.compartment.id = 'JON.Prod', instance.compartment.id = 'JON.SIT'
- C. All { instance in compartment 'Prod' and Compartment 'SIT' }
- D. All { instance.compartment.id = 'JON.Prod', instance.compartment.id = 'JON.SIT'
Answer: B
Explanation:
NEW QUESTION 41
What information do you get by using the Network Visualizer tool?
- A. State of subnets in a VCN
- B. Organization of subnets and VLANs across availability domains
- C. Routes defined between subnets and gateways
- D. Interconnectivity of VCNs
Answer: D
Explanation:
https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/network_visualizer.htm You can view and understand the following from this diagram:
How VCNs are inter-connected
How on-premises networks are connected (using FastConnect or Site-to-Site VPN) Which routing entities (DRGs and so on) control traffic routing How your transit routing is configured
NEW QUESTION 42
A member of operations team has set Pre-Authenticated Request (PAR) associated with a bucket to an incorrect date and now wants to edit the PAR request. How can this be achieved?
- A. Delete the bucket associated with PAR and recreate it
- B. Delete the PAR and recreate it with the required date
- C. Don't set an expiration time for PAR
- D. Delete both PAR as well as the bucket then recreate both
Answer: B
Explanation:
NEW QUESTION 43
Which type of software do you use to centrally distribute and monitor the patch level of systems throughout the enterprise?
- A. Recovery Manager software
- B. Network Monitor software
- C. Web Application Firewall
- D. Patch Management software
Answer: D
Explanation:
https://docs.oracle.com/cd/E11857_01/em.111/e18710/T531901T535649.htm
NEW QUESTION 44
With regard to WAF in OCI, which of the following statements are NOT customer's responsibility? Select TWO answers.
- A. Configure WAF policies for websites
- B. WAF edge nodes with High Availability
- C. Import latest OWASP Core Rule Sets
- D. Configure Bot Management strategies for a website traffic
Answer: B,C
NEW QUESTION 45
Which volume type contains the image used to boot a compute instance?
- A. Startup volume
- B. Boot volume
- C. Init 6 volume
- D. Block volume
Answer: B
Explanation:
Boot Volumes
When you launch a virtual machine (VM) or bare metal instance based on a platform image or custom image, a new boot volume for the instance is created in the same compartment. That boot volume is associated with that instance until you terminate the instance. When you terminate the instance, you can preserve the boot volume and its data
https://docs.oracle.com/en-us/iaas/Content/Block/Concepts/bootvolumes.htm
NEW QUESTION 46
You want to make API calls against other OCI services from your instance without configuring user credentials. How would you achieve this?
- A. Create a dynamic group and add a policy.
- B. Create a dynamic group and add your instance.
- C. Create a group and add a policy.
- D. No configuration is required for making API calls.
Answer: A
Explanation:
DYNAMIC GROUP
Dynamic groups allow you to group Oracle Cloud Infrastructure instances as principal actors, similar to user groups. You can then create policies to permit instances in these groups to make API calls against Oracle Cloud Infrastructure services. Membership in the group is determined by a set of criteria you define, called matching rules. https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/callingservicesfrominstances.htm
NEW QUESTION 47
Which resources can be used to create and manage from Vault Service ? Select TWO correct answers
- A. Secret
- B. Cloud Guard
- C. Keys
- D. IAM
Answer: A,C
Explanation:
NEW QUESTION 48
......
Correct and Up-to-date Oracle 1z0-1104-21 BrainDumps: https://www.testsimulate.com/1z0-1104-21-study-materials.html