1z0-1104-23 Exam Dumps - Oracle Cloud Infrastructure 2023 Security Professional

Go to page:

Question # 17

What are the two items required to create a rule for the Oracle Cloud Infrastructure (OCI) Events Service? (Choose two.)

Management Agent Cloud Service

Service Connector

Rule Conditions

Install key

Actions

Full Access

Question # 18

An automobile company needs to configure Bastion Managed SSH session to a compute

instance in a private subnet. What are the TWO prerequisites to configure successfully?

NAT or Service Gateway should be attached to the private subnet

There is no need for any gateway in private subnet

SSH port forwarding should be enabled

Route rule to a NAT or Service Gateway should be associated with the subnet of the route table

Full Access

Question # 19

Logical isolation for resources is provided by which OCI feature?

Tenancy

Availability Zone

Region

Compartments

Full Access

Question # 20

As a security administrator, you want to create cloud resources that alignwith Oracle's security principles and best practices. Which security service should you use?

Identity and Access Management

Cloud Guard

Security Advisor

Web Application Firewall (WAF)

Full Access

Question # 21

What would you use to make Oracle Cloud Infrastructure Identity and Access Management govern resources in a tenancy?

Policies

Users

Dynamic groups

Groups

Full Access

Question # 22

What information do youget by using the Network Visualizer tool?

State of subnets in a VCN

Interconnectivity of VCNs

Routes defined between subnets and gateways

Organization of subnets and VLANs across availability domains

Full Access

Question # 23

You are tasked with building a highly available, fault tolerant web application for your current employer. The security team is concerned about an increase in malicious web-based attacks across the Internet and therefore wants to add a higher level of security to the website. How would you architect the solution in Oracle Cloud Infrastructure (OCI) to meet the security requirements defined by your organization? (Choose the best Answer.)

Deploy at least three web servers, each in different faut domain using a regional private subnet. Place a public load balancer in a regional public subnet and create a backend set for all the web servers. \

Deploy Web Application Firewall (WAF) and configure the load balancer public IP address as the origin.

Deploy at least three web servers, each in a different fault domain in a public subnet. Ensure that each web server is assigned a public IP address. Depley Web Application Firewall (WAS) and configure one origin for each public P address.

Deploy at least three web servers, each in a different faut domain in a private subnet. Place a public load balancer in a public subnet and create a backend set for all the web servers Create Geolocation steering policy in OCI Traffic Management and add an answer pool that directs to the public IP address of the load balancer.

Deploy at least three web servers, each in a different fault domain in a public subnet. Use OCI Traffic Management service to create a load balancing policy to resolve DNS evenly between all web servers.

Full Access

Question # 24

Which are the three prerequisites for successfully configuring a Bastion managed SSH ses-sion to a compute instance in a private subnet? (Choose three.)

The compute instance must have the Bastion cloud agent enabled.

The private subnet must have a service or NAT gateway.

The private subret must not have any gateway in it

The SSH port forwarding feature needs to be enabled

The compute instance must have the Bastion cloud agent disabled

The route table associated with the subnet needs to have a route rule to a service or NAT gateway.

Full Access

Go to page: