Question 1

"Your company is in the process of migrating its sensitive data to Oracle Cloud Infrastructure (OCI) and is prioritizing the strongest possible security measures. Encryption is a key part of this strategy, but you are particularly concerned about the physical security of the hardware where your encryption keys will be stored. Which characteristic of OCI Key Management Service (KMS) helps ensure the physical security of your encryption keys?

Options :

A : Granular customer control over key access permissions

B : Centralized key management for simplified administration

C : Seamless integration with other OCI services for streamlined workflows

D : Utilization of FIPS 140-2 validated Hardware Security Modules (HSMs)"

Answer: D

Question 2

Within OCI IAM identity domains, the AD Bridge component serves a critical role. How does the AD Bridge functionality specifically enhance Identity and Access Management (IAM) practices?

Options :

A : It simplifies user provisioning by enabling automated synchronization of user accounts and group memberships from an existing Microsoft Active Directory (AD) environment.

B : It facilitates delegated administration, allowing authorized AD users to manage specific resources within the OCI identity domain.

C : It strengthens access security by providing an additional layer of authentication through AD integration.

D : It directly integrates with OCI MFA providers, allowing for seamless enforcement of MFA for users authenticated through AD credentials.

Answer: A

Question 3

An OCI administrator notices that a compute instance running in the production compartment is unable to create Object Storage buckets using the OCI CLI command:The error message returned states:"NotAuthorizedOrNotFound: You are not authorized to perform this action."The administrator verifies that the instance has Internet access and can reach OCI endpoints.What then could be causing the issue?

Options :

A : The instance is using the wrong OCI CLI authentication method.

B : The bucket name is already in use, causing a conflict.

C : The policy is written at the root compartment instead of the production compartment.

D : The instance is not part of any Dynamic Group or the matching rule is incorrect.

Answer: D

Question 4

"You are designing a secure access strategy for compute instances deployed within a private subnet of an OCI Virtual Cloud Network (VCN). Your security policy requires that no compute instances in the private subnet should have direct Internet access, and administrative access should be controlled. Which statement best describes the role of an OCI Bastion in securing access to these private compute instances?

Options :

A : It provides a direct public endpoint for the compute instance, enabling remote access.

B : It serves as a secondary authentication point, verifying user credentials before granting access to the compute instance.

C : It acts as a firewall, blocking any external access to the private compute instance.

D : It creates a secure, publicly accessible entry point to access target resources in a private subnet."

Answer: D

Question 5

During your investigation of a load balancer issue, you discovered that all back-end servers associated with one of the affected listeners were reported as unhealthy. However, when you checked the back-end servers, they seemed to be working just fine. What might be causing this issue?

Options :

A : Incorrect subnet configuration

B : Misconfigured security rule

C : Incorrect DNS configuration

D : Overloaded back-end servers

E : Misconfigured health check

Answer: E

Free 1Z0-1104-26 Mock Exam – Practice Online Confidently

Buying Options: