Question 1

A company is securing its compute instances (VMs and Bare Metal Machines) in Oracle Cloud infrastructure (OCI) using a network firewall. As shown in the diagram, traffic flows from the internet Gateway (IGW) to the firewall in the Public DMZ Subnet, and then to the compute instances in the Public Subnet.

Options :

A : If the policy used with the firewall has no rules specified, the firewall allows all traffic.

B : Ensure that any security list or NSG rules allow the traffic to enter the firewall for appropriate evaluation.

C : Add stateful rules to the security list attached to the firewall subnet or include the firewall in an NSG containing stateful rules for better performance.

D : Security list and NSG rules associated with the firewall subnet and VNICs are evaluated after the firewall.

Answer: B

Question 2

"A business has a hybrid cloud infrastructure with Oracle Linux instances running in OCI and on-premises. They want to reduce the amount of bandwidth used when patching systems. Which component of OS Management Hub can help to reduce the bandwidth usage for patching?

Options :

A : Management stations

B : Management agents

C : Dynamic groups

D : Profiles"

Answer: D

Question 3

Based on the provided diagram, you have a group of critical compute instances in a private subnet that require vulnerability using the Oracle Cloud Infrastructure(OCI) Vulnerability Scanning Service (VSS)."What additional configuration is required to enable VSS to scan instances in the private subnet

Options :

A : VSS cannot scan private instances. You need to move them to a public subnet for vulnerability scanning.

B : Configure a service gateway in the VCN and a route rule to direct traffic for the VSS service through the gateway.

C : No additional configuration is needed. VSS can access private instances by default.

D : Use an OCI Bastion session to establish connectivity and forward scan results from the private instances."

Answer: B

Question 4

You have created a compartment TEST in your subscribed tenancy. Then, you created two groups, test1 and test2, and want the users in these groups to be able to manage all the resources in the TEST compartment. Which policy would you use to achieve this?

Options :

A : Allow group/test*/to manage all resources in compartment test.

B : Allow group test1, test2 to manage all resources in compartment test.

C : Allow any-user to manage all resources in compartment test where any {request.groups.test1, test2}

D : Allow any-user to manage all resources in compartment test where request.group='test*'

Answer: B

Question 5

Which Oracle Data Safe feature enables the Internal test, development, and analytics teams to operate effectively while minimizing their exposure to sensitive data?

Options :

A : Security assessment

B : Data encryption

C : Data auditing

D : Sensitive data discovery

Answer: D

Confidently Practice Online with Free 1Z0-1104-26 Exam Cram

Buying Options: