Oracle Cloud Infrastructure Security 2021 Associate

Question 1

How can you establish private connectivity over two VCN within same OCI region without traversing the traffic over public internet ?

A. Data Guard

B. Local VCN Peering

C. NAT Gateway

D. Remote VCN Peering

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

Which security issues can be identified by Oracle Vulnerability Scanning Service? Select TWO correct answers

A. CIS published Industry-standard benchmarks

B. Distributed Denial of Service (DDoS)

C. SQL Injection

D. Ports that are unintentionally left open can be a potential attack vector for cloud resources

Correct Answer: A,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

How can you restrict access to OCI console from unknown IP addresses?

A. Create tenancy's authentication policy and create WAF rules

B. Make OCI resources private instead of public

C. Create PAR to restrict access the access

D. Create tenancy's authentication policy and add a network source

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

An e-commerce company needs to authenticate with third-party API that don't support OCI's signature-based authentication.
What can be the solution for the above scenario?

A. API Key Authentication

B. Asymmetric keys

C. Auth Token/Swift Password

D. Security Token

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

Which IAM policy should be created to give XYZ the ability to list contents of a resource excluding the f needs to authenticate in prod compartment ? Principle of least priviledge should be used.

A. Allow group XYZ to use all resources in compartment != prod

B. Allow group XYZ to read all resources in tenancy where target.compartment.name != prod

C. Allow group XYZ to manage all resources in compartment != prod

D. Allow group XYZ to inspect all resources in tenancy where target.compartment.name != prod

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

How can you convert a fixed load balancer to a flexible load balancer?

A. Use Update Shape workflows.

B. There is no way to covert the load balancer.

C. Using the Edit Listener option.

D. Delete the fixed load balancer and create a new one.

Correct Answer: A

Question 7

Which statements are CORRECT about Security Zone policy in OCI ? Select TWO correct answers

A. Resources in a security zone must be encrypted using customer-managed keys

B. Bucket can't be moved from a security zone to a standard compartment

C. Resources in a security zone must be accessible from internet

D. Block volume can be moved from a security zone to a standard compartment

Correct Answer: A,B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 8

With regard to OCI Audit Log Service, which of the statement is INCORRECT?

A. Audit Events gets collected when modification within objects stored in an Object Storage bucket

B. Retention period for audit events cannot be modified

C. Events logged by the Audit service can be viewed by using the Console, API, or the SDK for Java

D. REST API calls can be recorded by Audit service

Correct Answer: A

Question 9

which two responsibilities will be oracle when you move your it infrastructure to oracle cloud infrastructure?

A. Strong Isolation

B. MAINTAINING CUSTOMER DATA

C. PROVIDING STRONG SECURITY LIST

D. Strong IAM Framework

E. ACCOUNT ACCESS MANAGEMENT

Correct Answer: A,D

Question 10

As a security administrator, you want to create cloud resources that align with Oracle's security principles and best practices. Which security service should you use?

A. Identity and Access Management

B. Security Advisor

C. Cloud Guard

D. Web Application Firewall (WAF)

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Oracle Cloud Infrastructure Security 2021 Associate - 1z0-1104-21 Exam Practice Test

Latest Update

Useful Links

Contact Us