1z0-1104-23試験無料問題集（172題）「Oracle Cloud Infrastructure 2023 Security Professional 認定」

出題：1

What is a prerequisite for creating a secret in OCI Vault? (Choose the best Answer.)

A. The user must create a compute instance to run the Secret service.

B. You must create a digest hash of the secret value.

C. You must have an Vault-managed key to encrypt the secret.

D. You must unseal the Vault by using Shamir's Secret Sharing.

正解：C 解答を投票する

出題：2

With regard to OCI Audit Log Service, which of the statement is INCORRECT?

A. Retention period for audit events cannot be modified

B. Audit Events gets collected when modification within objects stored inan Object Storage bucket

C. REST API calls can be recorded by Audit service

D. Events logged by the Audit service can be viewed by using the Console, API, or the SDK for Java

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Which resources can be used to create and manage from Vault Service ? Select TWO correct answers

A. Cloud Guard

B. IAM

C. Secret

D. Keys

正解：C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

You want to make API calls against other OCI services from your instance without configuring user credentials. How would you achieve this?

A. No configuration is required for making API calls.

B. Create a group and add a policy.

C. Create a dynamic group and add apolicy.

D. Create a dynamic group and add your instance.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

You need to set up instance principals so that an application running on an Oracle Cloud Infrastructure (OCI) instance can call public OCI services, without the need to configure user credentials. A developer in your team has already configured the application to authenticate using the instance principals provider. Which is NOT a necessary step to complete this set up? (Choose the best Answer.)

A. Generate Auth Tokens to enable instances in the dynamic group to authenticate with APIs.

B. Create a dynamic group with matching rules to specify which instances you want to al-low to make API calls against services.

C. Deploy the application to all the instances that belong to the dynamic group

D. Create a policy granting permissions to the dynamic group to access services in your compartment or tenancy

正解：A 解答を投票する

出題：6

Which of these protects customer data at rest and in transit in a way that allows customers to meet their security and compliance requirements forcryptographic algorithms and key management?

A. Identity Federation

B. Security controls

C. Customer isolation

D. Data encryption

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Which components are a part of the OCI Identity and Access Management service?

A. Policies

B. Compute instances

C. VCN

D. Regional subnets

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Which value must an application have to retrieve a secret bundle from Oracle Cloud Infrastructure? (Choose the best Answer.)

A. Key OCID

B. Vault OCID

C. Secret OCID

D. Bundle OCID

正解：B 解答を投票する

出題：9

Which securityissues can be identified by Oracle Vulnerability Scanning Service? Select TWO correct answers

A. CISpublished Industry-standard benchmarks

B. Distributed Denial of Service (DDoS)

C. Ports that are unintentionally left open can be a potential attack vector for cloud resources

D. SQL Injection

正解：A,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

How can you convert a fixed load balancer to a flexible load balancer?

A. Delete the fixed load balancer and create a new one.

B. There is no way to covert the load balancer.

C. Using the Edit Listener option.

D. Use Update Shape workflows.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

1z0-1104-23試験無料問題集「Oracle Cloud Infrastructure 2023 Security Professional 認定」