최신 1z0-1104-22 무료덤프 - Oracle Cloud Infrastructure 2022 Security Professional

문제1

Which OCI cloud service lets you centrally manage the encryption keys that protect your data and the secret credentials that you use to securely access resources?

A. Data Guard

B. Data Safe

C. Cloud Guard

D. Vault

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제2

you want to create a stateless rule for SSH in security list and the ingress role has already been properly configured what combination should you use on the engress role what commination should you use on the egress rule?

A. select tcp for protocol: enter 22 for source port" and 22 for destination port

B. select udp for protocol: enter 22 for source port" and all for destination port

C. select tcp for protocol: enter 22 for source port" and all for destination port

D. select tcp for protocol: enter all for source port" and 22 for destination port.

정답: D

문제3

As a security architect, how can you prevent unwanted bots while desirable bots are allowed to enter?

A. Data Guard

B. Compartments

C. Web Application Firewall (WAF)

D. Vault

정답: C

문제4

Which OCI service can index, enrich, aggregate, explore, search, analyze, correlate, visualize and monitor data?

A. Data Guard

B. Data Safe

C. WAF

D. Logging Analytics

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제5

What are the security recommendations and best practices for Oracle Functions?

A. Define a policy statement that enables access to functions for requests coming from multiple IP addresses.

B. Add applications to network security groups for fine-grained ingress/egress rules.

C. Ensure that functions in a VCN have restricted access to resources and services.

D. Grant privileges to UID and GID 1000, such that the functions running within a container acquire the default root capabilities.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제6

You are using a custom application with third-party APIs to manage application and data hosted in an Oracle Cloud Infrastructure (OCI) tenancy. Although your third-party APIs don't support OCI's signature-based authentication, you want them to communicate with OCI resources. Which authentication option must you use to ensure this?

A. Auth Token

B. API Signing Key

C. OCI username and Password

D. SSH Key Pair with 2048-bit algorithm

정답: A

문제7

Which parameters customers need to configure while reading secrets by name using CL1 or API? Select TWO correct answers.

A. Vault Id

B. Certificates

C. ASCII Value

D. Secret Name

정답: A,D

설명: (DumpTOP 회원만 볼 수 있음)

문제8

A company needs to have some buckets as public in the compartment. You want Cloud Guard to ignore the problem associated with public bucket. Select TWO correct answers

A. Make the bucket private so that Cloud Guard won't detect it

B. Configure Conditional groups for the detector to fix base line

C. First make the bucket private and after few days make the bucket public again

D. Dismiss the issues associated with these resources

정답: B,D

문제9

Which security issues can be identified by Oracle Vulnerability Scanning Service? Select TWO correct answers

A. CIS published Industry-standard benchmarks

B. Distributed Denial of Service (DDoS)

C. SQL Injection

D. Ports that are unintentionally left open can be a potential attack vector for cloud resources

정답: A,D

설명: (DumpTOP 회원만 볼 수 있음)

문제10

A company has OCI tenancy which has mount target associated with two File Systems, CG_1 and CG_2. These File Systems are accessed by IP-based clients AB_1 and AB_2 respectively. As a security administrator, how can you provide access to both clients such that CGI has Read only access on AB1 and CG_2 has Read/Write access on AB_2?

A. NFS Export Option

B. Access Control Lists

C. NFS v3 Unix Security

D. Vault

정답: A,C

설명: (DumpTOP 회원만 볼 수 있음)

최신 1z0-1104-22 무료덤프 - Oracle Cloud Infrastructure 2022 Security Professional

우리와 연락하기

유용한 링크

최신 업데이트