2022 Correct and Up-to-date Oracle 1z0-1104-21 BrainDumps [Q39-Q58]

4.4/5 - (7 votes)

2022 Correct and Up-to-date Oracle 1z0-1104-21 BrainDumps

Current 1z0-1104-21 dumps Preparation through Our Practice Test

QUESTION 39
Where are logs stored?

OCI Object Storage

OCI File Storage

OCI Block Storage

Cloud Agent

You can collect log data continuously from Oracle Cloud Infrastructure (OCI) Object Storage. To enable the log collection, create ObjectCollectionRule resource using REST API or CLI. After the successful creation of this resource and having the required IAM policies, the log collection will be initiated.
https://docs.oracle.com/en-us/iaas/logging-analytics/doc/collect-logs-your-oci-object-storage-bucket.html

QUESTION 40
What does an audit log event include?

Audit type

Header

Footer

Type of input

The HTTP header fields and values in the request.
https://docs.oracle.com/en-us/iaas/Content/Audit/Reference/logeventreference.htm

QUESTION 41
Operations team has made a mistake in updating the secret contents and immediately need to resume using older secret contents in OCI Secret Management within a Vault.
As a Security Administrator, what step should you perform to rollback to last version? Select TWO correct answers.

Mark the secret version as ‘deprecated’

Mark the secret version as ‘Previous’

Mark the secret version as ‘Rewind’

Upload new secret and mark as ‘Pending’. Promote this secret version as ‘Current’

QUESTION 42
As a security administrator, you want to create cloud resources that align with Oracle’s security principles and best practices. Which security service should you use?

Identity and Access Management

Cloud Guard

Security Advisor

Web Application Firewall (WAF)

QUESTION 43
Which challenge is generally the first level of bot mitigation, but not sufficient with more advanced bot tools?

CAPTCHA challenge

JavaScript challenge

Device fingerprint challenge

Human interaction challenge

QUESTION 44
What is the minimum active storage duration for logs used by Logging Analytics to be archived?

60 days

10 days

30 days

15 days

https://docs.oracle.com/en-us/iaas/logging-analytics/doc/manage-storage.html#:~:text=The%20minimum%20Active%20Storage%20Duration,be%20archived%20is%2030%20days.
The minimum Active Storage Duration (Days) for logs before they can be archived is 30 days.

QUESTION 45
What information do you get by using the Network Visualizer tool?

State of subnets in a VCN

Interconnectivity of VCNs

Routes defined between subnets and gateways

Organization of subnets and VLANs across availability domains

https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/network_visualizer.htm You can view and understand the following from this diagram:
How VCNs are inter-connected
How on-premises networks are connected (using FastConnect or Site-to-Site VPN) Which routing entities (DRGs and so on) control traffic routing How your transit routing is configured

QUESTION 46
Which architecture is based on the principle of “never trust, always verify”?

Federated identity

Zero trust

Fluid perimeter

Defense in depth

Enterprise Interest in Zero Trust is Growing Ransomware and breaches are top of the news cycle and a major concern for organizations big and small. So, many are now looking at the Zero Trust architecture and its primary principle “never trust, always verify” to provide greater protection.
According to Report Linker, the Zero Trust security market is projected to grow from USD 15.6 billion in 2019 to USD 38.6 billion by 2024 and that sounds right based on the large number of companies pitching their Zero Trust wares at RSA 2020.
The enterprise was well represented at the conference and there was a tremendous amount of interest in Zero Trust. Interestingly, even though Zero Trust environments are often made up of several solutions from multiple vendors it hasn’t prevented each of the vendors from evangelizing their flavors of Zero Trust. This left the thousands of attendees to attempt to cut through the Zero Trust buzz and noise and make their own conclusions to the best approach.
https://blogs.oracle.com/cloudsecurity/post/rsa-2020-recap-cloud-security-moves-to-the-front

QUESTION 47
With regard to WAF in OCI, which of the following statements are NOT customer’s responsibility? Select TWO answers.

Configure WAF policies for websites

WAF edge nodes with High Availability

Configure Bot Management strategies for a website traffic

Import latest OWASP Core Rule Sets

QUESTION 48
You subscribe to a PaaS service that follows the Shared Responsibility model.
Which type of security is your responsibility?

Network

Infrastructure

Data

Guest OS

https://www.oracle.com/a/ocom/docs/cloud/oracle-ctr-2020-shared-responsibility.pdf

QUESTION 49
Which statement is true about origin management in WAF?
Statement A: Multiple origins can be defined.
Statement B: Only a single origin can be active for a WAF.

Only statement B is true.

Both the statements are false.

Both the statements are true.

Only statement A is true.

QUESTION 50
Which component helps move logging data to other services, such as archiving log data in object storage?

Agent Configuration

Unified Monitoring Agent

Service Connector Hub

Service Log Category

Service Connector Hub
Service Connector Hub moves logging data to other services in Oracle Cloud Infrastructure. For example, use Service Connector Hub to alarm on log data, send log data to databases, and archive log data to Object Storage. For more information, see Service Connector Hub.
https://docs.oracle.com/en-us/iaas/Content/Logging/Concepts/loggingoverview.htm

QUESTION 51
Which statements are CORRECT about Security Zone policy in OCI ? Select TWO correct answers

Block volume can be moved from a security zone to a standard compartment

Bucket can’t be moved from a security zone to a standard compartment

Resources in a security zone must be accessible from internet

Resources in a security zone must be encrypted using customer-managed keys

QUESTION 52
How can you restrict access to OCI console from unknown IP addresses?

Create tenancy’s authentication policy and create WAF rules

Create tenancy’s authentication policy and add a network source

Make OCI resources private instead of public

Create PAR to restrict access the access

QUESTION 53
which two responsibilities will be oracle when you move your it infrastructure to oracle cloud infrastructure?

Strong IAM Framework

PROVIDING STRONG SECURITY LIST

Strong Isolation

MAINTAINING CUSTOMER DATA

ACCOUNT ACCESS MANAGEMENT

QUESTION 54
Which statement is true about standards?

They may be audited.

They are result of a regulation or contractual requirement or an industry requirement.

They are methods and instructions on how to maintain or accomplish the directives of the policy.

They are the foundation of corporate governance.

QUESTION 55
When does Cloud Guard re-open an issue and update the history?

If it detects an issue again for an Open (unresolved) problem

If it detects an issue for a previously resolved/dismissed activity problem

If it detects an issue for a previously resolved configuration problem

If it detects an issue for a previously dismissed configuration problem

If Cloud Guard detects an issue again for:
An Open (unresolved) problem, it updates the problem history, but doesn’t create a new problem.
A previously solved problem, it reopens the issue and updates the history.
A previously dismissed problem, it updates the history.
https://docs.oracle.com/en-us/iaas/cloud-guard/using/problems-page.htm

QUESTION 56
Which statement is true about Oracle Cloud Infrastructure (OCI) Object Storage server-side encryption?

All the traffic to and from object storage is encrypted by using Transport Layer Security.

Encryption is not enabled by default.

Customer-provided encryption keys are never stored in OCI Vault service.

Each object in a bucket is always encrypted with the same data encryption key.

QUESTION 57
Which type of file system does file storage use?

NFSv3

iSCSI

Paravirtualized

NVMe

SSD

The File Storage service supports the Network File System version 3.0 (NFSv3) protocol. The service supports the Network Lock Manager (NLM) protocol for file locking functionality.
https://docs.oracle.com/en-us/iaas/Content/File/Concepts/filestorageoverview.htm

QUESTION 58
Which WAF service component must be configured to allow, block, or log network requests when they meet specified criteria?

Protection rules

Bot Management

Origin

Web Application Firewall policy

Protection rules
Protection rules can be configured to either allow, block, or log network requests when they meet the specified criteria of a protection rule. The WAF will observe traffic to your web application over time and suggest new rules to apply.
https://www.oracle.com/security/cloud-security/what-is-waf/

Loading …

Oracle 1z0-1104-21 Exam Syllabus Topics:

Topic	Details
Topic 1	Configure and manage Secrets in OCI Vault Secure connectivity of hybrid networks (Site-to-Site VPN, FastConnect)
Topic 2	Describe key capabilities provided by Data Safe Describe use case for auditing and review OCI Audit Logs
Topic 3	Implement security monitoring and alerting Secure connectivity of virtual networks (DRG v2, Peering)
Topic 4	Design and implement a logging and logging analytics solution Configure Dynamic Groups, Network Sources, and Tag-Based Access Control
Topic 5	Design a scalable authorization model with users, groups, and policies Implement conditional and advanced policies
Topic 6	Configure security for Oracle Autonomous Database and DB Systems Configure security for OKE and Oracle Functions
Topic 7	Understand and implement Security Zones and Security Advisor Identify the Cloud Security use cases, challenges, and trends
Topic 8	Describe the use case for VCN Flow Logs Use Compartments to isolate resources
Topic 9	Describe use case for Penetration and Vulnerability Testing Cloud Security Business Drivers and Challenges
Topic 10	Create and configure Web Application Firewall Configure Network Security Groups (NSGs) and Security Lists