1z0-1104-25 試験問題を無料オンラインアクセス

Which are the essential components to create a rule for the Oracle Cloud Infrastructure (OCI) Events Service?

• A.Install Key and Actions
• B.Rule Conditions and Management Agent Cloud Service
• C.Install Key and Service Connector
• D.Rule Conditions and Actions

"A company, ABC, is planning to launch a new web application on OCI. Based on past experiences, they expect a significant surge in traffic after the launch. You are responsible for ensuring that the application is highly available.
Which step would you perform to achieve this goal?

• A.Use a Virtual Cloud Network (VCN) with subnets, security lists, and routing rules to isolate the web application from the Internet and other resources.
• B.Configure Cloud Guard to prevent large amounts of traffic from reaching the web application.
• C.Use a load balancer to distribute incoming traffic evenly across multiple instances of the web application."
• D.Implement security controls, such as web application firewalls, to protect against common attack vectors.

An E-commerce company running on Oracle Cloud Infrastructure (OCI) wants to prevent accidental misconfigurations that could expose sensitive data. They need an OCI service that can enforce predefined security rules when creating or modifying cloud resources.
Which OCI service should they use?

• A.OCI Security Zone
• B.OCI Certificates
• C.OCI Web Application Firewall (WAF)
• D.OCI Identity and Access Management (IAM)

You have created a compartment TEST in your subscribed tenancy. Then, you created two groups, test1 and test2, and want the users in these groups to be able to manage all the resources in the TEST compartment.
Which policy would you use to achieve this?

• A.Allow any-user to manage all resources in compartment test where any {request.groups.test1, test2}
• B.Allow group test1, test2 to manage all resources in compartment test.
• C.Allow any-user to manage all resources in compartment test where request.group='test*'
• D.Allow group/test*/to manage all resources in compartment test.

A company is securing its compute instances (VMs and Bare Metal Machines) in Oracle Cloud infrastructure (OCI) using a network firewall. As shown in the diagram, traffic flows from the internet Gateway (IGW) to the firewall in the Public DMZ Subnet, and then to the compute instances in the Public Subnet.

When configuring security lists and network security groups (NSGs) in this setup, what should they consider?

• A.Ensure that any security list or NSG rules allow the traffic to enter the firewall for appropriate evaluation.
• B.Security list and NSG rules associated with the firewall subnet and VNICs are evaluated after the firewall.
• C.If the policy used with the firewall has no rules specified, the firewall allows all traffic.
• D.Add stateful rules to the security list attached to the firewall subnet or include the firewall in an NSG containing stateful rules for better performance.