Question 1

A company has deployed OCI Zero Trust Packet Routing (ZPR) to secure its network. They have two compute instances, VM1-01 and VM-02, in a public subnet. VM-01 is tagged with the security attribute app: vm01, and VM-02 is tagged with app:vm02. The VCN is labeled with network:vcn01, The ZPR policy states:"What is the expected outcome of this policy?

Options :

A : VM-02 can SSH into VM-01, but VM-01 cannot SSH into VM-02.

B : VM-01 can SSH into VM-02, but VM-02 cannot SSH into VM-01.

C : Both VM-01 and VM-02 can SSH into each other.

D : Neither VM-01 nor VM-02 can SSH into each other."

Answer: B

Question 2

You are the first responder of a security incident for ABC Org. You have identified several IP addresses and URLs in the logs that you suspect may be related to the incident. However, you need more information to confidently determine whether they are indeed malicious or not. Which OCI service can you use to obtain a more refined information and confidence score for these identified indicators?

Options :

A : OCI Incidence Responder

B : OCI Threat Intelligence

C : OCI Web Application Firewall

D : OCI Security Zones

Answer: B

Question 3

Which Oracle Data Safe feature enables the Internal test, development, and analytics teams to operate effectively while minimizing their exposure to sensitive data?

Options :

A : Security assessment

B : Data encryption

C : Data auditing

D : Sensitive data discovery

Answer: D

Question 4

An E-commerce company running on Oracle Cloud Infrastructure (OCI) wants to prevent accidental misconfigurations that could expose sensitive data. They need an OCI service that can enforce predefined security rules when creating or modifying cloud resources. Which OCI service should they use?

Options :

A : OCI Web Application Firewall (WAF)

B : OCI Identity and Access Management (IAM)

C : OCI Security Zone

D : OCI Certificates

Answer: C

Question 5

Based on the provided diagram, you have a group of critical compute instances in a private subnet that require vulnerability using the Oracle Cloud Infrastructure(OCI) Vulnerability Scanning Service (VSS)."What additional configuration is required to enable VSS to scan instances in the private subnet

Options :

A : VSS cannot scan private instances. You need to move them to a public subnet for vulnerability scanning.

B : Configure a service gateway in the VCN and a route rule to direct traffic for the VSS service through the gateway.

C : No additional configuration is needed. VSS can access private instances by default.

D : Use an OCI Bastion session to establish connectivity and forward scan results from the private instances."

Answer: B

Confidently Practice Online with Free 1Z0-1104-26 Exam Cram

Buying Options: