Question 1

An E-commerce company running on Oracle Cloud Infrastructure (OCI) wants to prevent accidental misconfigurations that could expose sensitive data. They need an OCI service that can enforce predefined security rules when creating or modifying cloud resources. Which OCI service should they use?

Options :

A : OCI Web Application Firewall (WAF)

B : OCI Identity and Access Management (IAM)

C : OCI Security Zone

D : OCI Certificates

Answer: C

Question 2

Your organization needs to implement strong password policies for users in OCI. Which of the following statements is TRUE about password policies in OCI IAM?

Options :

A : Custom password policies allow for granular control over password complexity.

B : The default password policy cannot be modified.

C : Only one password policy can be applied to all users in a domain.

D : Simple password policies are suitable for production environments.

Answer: A

Question 3

"A company, ABC, is planning to launch a new web application on OCI. Based on past experiences, they expect a significant surge in traffic after the launch. You are responsible for ensuring that the application is highly available. Which step would you perform to achieve this goal?

Options :

A : Use a Virtual Cloud Network (VCN) with subnets, security lists, and routing rules to isolate the web application from the Internet and other resources.

B : Implement security controls, such as web application firewalls, to protect against common attack vectors.

C : Configure Cloud Guard to prevent large amounts of traffic from reaching the web application.

D : Use a load balancer to distribute incoming traffic evenly across multiple instances of the web application."

Answer: D

Question 4

An OCI administrator notices that a compute instance running in the production compartment is unable to create Object Storage buckets using the OCI CLI command:The error message returned states:"NotAuthorizedOrNotFound: You are not authorized to perform this action."The administrator verifies that the instance has Internet access and can reach OCI endpoints.What then could be causing the issue?

Options :

A : The instance is using the wrong OCI CLI authentication method.

B : The bucket name is already in use, causing a conflict.

C : The policy is written at the root compartment instead of the production compartment.

D : The instance is not part of any Dynamic Group or the matching rule is incorrect.

Answer: D

Question 5

"You are designing a secure access strategy for compute instances deployed within a private subnet of an OCI Virtual Cloud Network (VCN). Your security policy requires that no compute instances in the private subnet should have direct Internet access, and administrative access should be controlled. Which statement best describes the role of an OCI Bastion in securing access to these private compute instances?

Options :

A : It provides a direct public endpoint for the compute instance, enabling remote access.

B : It serves as a secondary authentication point, verifying user credentials before granting access to the compute instance.

C : It acts as a firewall, blocking any external access to the private compute instance.

D : It creates a secure, publicly accessible entry point to access target resources in a private subnet."

Answer: D

Free 1Z0-1104-26 Mock Exam – Practice Online Confidently

Buying Options: