2023 Valid 1z0-1104-23 test answers & Oracle Exam PDF [Q54-Q71] : Exams Labs Braindumps : http://blog.examslabs.com

Q54. For how long are API calls audited and available?

30days

90 days

365 days

60 days

Q55. Which securityissues can be identified by Oracle Vulnerability Scanning Service? Select TWO correct answers

Distributed Denial of Service (DDoS)

Ports that are unintentionally left open can be a potential attack vector for cloud resources

SQL Injection

CISpublished Industry-standard benchmarks

Q56. Logical isolation for resources is provided by which OCI feature?

Tenancy

Availability Zone

Region

Compartments

Q57. Which statement about Oracle Cloud Infrastructure Multi-Factor Authentication (MFA)is NOT valid?

Users cannot disable MFA for themselves.

A user can register only one device to use for MFA.

Users must install a supported authenticator app on the mobile device they intend to register for MFA.

An administrator can disable MFA for another user.

Q58. An e-commerce company needs to authenticate with third-party API that don’t support OCI’s signature-based authentication.
What can be the solution for the above scenario?

Security Token

API Key Authentication

Asymmetric keys

Auth Token/Swift Password

Q59. A http web server hosted on an Oracle cloud infrastructure compute instance in a public subnet of the vcsl virtual cloudnetwork has a stateless security ingress rule for port 80 access through internet gateway stateful network security group notification for port 80 how will the Oci vcn handle request response traffic to the compute instance for a web page from the http server with port 80?

network security group would supersede the security utility list and allow both inbound and outbound traffic

the union of both configuration would happen and allow both inbound and outbound traffic

due to the conflict in security configuration inbound request traffic would not be allowed

Because there is no Egress ruled defined in Security List, The Response would not pass through Internet Gateway.

Q60. Which tasks can you perform on a dedicated virtual machine host?

Manual scaling

Creating instance pools

Instance configurations

Capacity reservations

Q61. What is the minimum active storage duration for logs used by Logging Analytics to be archived?

60 days

10 days

30 days

15 days

Q62. A company needs to have somebuckets as public in the compartment. You want Cloud Guard to ignore the problem associated with public bucket. Select TWO correct answers

Dismiss the issues associated with these resources

Make the bucket private so that Cloud Guard won’t detectit

Configure Conditional groups for the detector to fix base line

First make the bucket private and after few days make the bucket public again

Q63. Where are logs stored?

OCI Object Storage

OCI File Storage

OCI Block Storage

Cloud Agent

Q64. What do the features of OS Management Service do?

Add complexity in using multiple tools tomanage mixed-OS environments.

Provide paid service and support to OCI subscribers for fixes on priority.

Increase security and reliability by regular bug fixes.

Encourage manual setup to avoid machine-induced errors.

Q65. Which of the following is necessary step when creating a secret in vault?

Vault-managed key is necessary to encrypt the secret

Digest Hash shouldbe created of the secret value

Object Storage must be created to run secret service

Shamir’s secret sharing algorithm should be used to unseal the vault

Q66. What does the following identity policy do?
Allow group my-group to use fn-invocation in compartment ABC where target.function.id ='<function-OCID>’

Enables users in a group to create, update, and delete ALL applications and functions in a compartment

Enables users to invoke all the functions in a specific application

Enables users to invoke just one specific function

Enables users to invoke all the functions in a compartment except for one specific function

Q67. Which is NOT a compliance document?

Certificate

Penetration test report

Attestation

Bridge letter

Q68. Which OCI service canindex, enrich, aggregate, explore, search, analyze, correlate, visualize and monitor data?

Data Guard

Data Safe

WAF

Logging Analytics

Q69. Which components are a part of the OCI Identity and Access Management service?

Policies

Regional subnets

Compute instances

VCN

Q70. Which statement is true about Oracle Cloud Infrastructure (OCI) Object Storage server-side encryption?

All the traffic to and from object storage is encrypted by using Transport Layer Security.

Encryption is not enabled by default.

Customer-provided encryption keys are never stored in OCI Vault service.

Each object in a bucket is always encrypted with the same data encryption key.

Q71. A member of operations team has set Pre-Authenticated Request (PAR) associated with a bucket to an incorrect date and now wants to edit the PARrequest. How can this be achieved?

Don’t set an expiration time for PAR

Delete the bucket associated with PAR and recreate it

Delete the PAR and recreate it with the required date

Delete both PAR as well as the bucket then recreate both