Oracle 1z0-1104-25リアル試験問題テストエンジン問題集トレーニングには39問あります
1z0-1104-25実際の問題解答PDFには100%カバー率リアル試験問題
質問 # 16
In Oracle Cloud Infrastructure (OCI), bare metal instances provide customers with direct access to the underlying hardware. To mitigate security risks when a customer terminates a bare metal instance, OCI utilizes Root-of-Trust hardware.
What is the primary function of the Root-of-Trust hardware in this context?
- A. It guarantees complete isolation between customer workloads on different instances.
- B. It automatically encrypts data at rest on the bare metal instance.
- C. It ensures all non-volatile memory on the terminated instance is securely wiped before reuse.
- D. It eliminates the need for hypervisors, reducing the potential attack surface.
正解：C
質問 # 17
Which Oracle Data Safe feature enables the Internal test, development, and analytics teams to operate effectively while minimizing their exposure to sensitive data?
- A. Data auditing
- B. Sensitive data discovery
- C. Security assessment
- D. Data encryption
正解：B
質問 # 18
You have created a compartment TEST in your subscribed tenancy. Then, you created two groups, test1 and test2, and want the users in these groups to be able to manage all the resources in the TEST compartment.
Which policy would you use to achieve this?
- A. Allow group test1, test2 to manage all resources in compartment test.
- B. Allow group/test*/to manage all resources in compartment test.
- C. Allow any-user to manage all resources in compartment test where request.group='test*'
- D. Allow any-user to manage all resources in compartment test where any {request.groups.test1, test2}
正解：A
質問 # 19
Challenge 2 -Task 1
In deploying a new application, a cloud customer needs to reflect different security postures. If a security zone is enabled with the Maximum Security Zone recipe, the customer will be unable to create or update a resource in the security zone if the action violates the attached Maximum Security Zone policy.
As an application requirement, the customer requires a compute instance in the public subnet. You therefore, need to configure Custom Security Zones that allow the creation of compute instances in the public subnet.
Review the architecture diagram, which outlines the resoures you'll need to address the requirement:
Preconfigured
To complete this requirement, you are provided with the following:
Access to an OCI tenancy, an assigned compartment, and OCI credentials
Required IAM policies
Task3: Create and configure a Virtual Cloud Network and Private Subnet
Createand configure virtual cloud Network (VCN) named IAD SP-PBT-VCN-01, with an internet Gateway and configure appropriate route rules to allow external connectivity.
Enter the OCID of the created VCN in the text box below.
正解：
解説：
See the solution below in Explanation.
Explanation:
To create and configure a Virtual Cloud Network (VCN) named IAD-SP-PBT-VCN-01 with an Internet Gateway and appropriate route rules for external connectivity, follow these steps based on the Oracle Cloud Infrastructure (OCI) Networking documentation.
Step-by-Step Solution for Task 3: Create and Configure a VCN and Private Subnet
* Log in to the OCI Console:
* Use your OCI credentials to log in to the OCI Console (https://console.us-ashburn-1.oraclecloud.
com).
* Ensure you have access to the assigned compartment.
* Navigate to Virtual Cloud Networks:
* From the OCI Console, click the navigation menu (hamburger icon) on the top left.
* UnderNetworking, selectVirtual Cloud Networks.
* Create a New VCN:
* ClickStart VCN Wizardand selectCreate VCN with Internet Connectivity.
* VCN Name:Enter IAD-SP-PBT-VCN-01.
* Compartment:Select the assigned compartment.
* VCN CIDR Block:Enter 10.0.0.0/16 (matches the diagram's VCN CIDR).
* Public Subnet CIDR Block:Enter 10.0.10.0/24 (matches the diagram's public subnet).
* Accept the default settingsfor the public subnet and Internet Gateway creation.
* ClickCreateto provision the VCN, Internet Gateway, and public subnet.
* Verify the Internet Gateway:
* After creation, go to the VCN details page for IAD-SP-PBT-VCN-01.
* UnderResources, selectInternet Gateways.
* Ensure the Internet Gateway is attached and enabled.
* Configure Route Rules:
* In the VCN details page, underResources, selectRoute Tables.
* Select the default route table associated with the public subnet (10.0.10.0/24).
* ClickAdd Route Rules.
* Target Type:SelectInternet Gateway.
* Destination CIDR Block:Enter 0.0.0.0/0.
* Target Internet Gateway:Select the Internet Gateway created with the VCN.
* ClickAdd Route Ruleto save.
* Update Security List (if needed):
* UnderResources, selectSecurity Lists.
* Edit the default security list for the public subnet.
* Add an ingress rule:
* Source CIDR:0.0.0.0/0
* IP Protocol:TCP
* Source Port Range:All
* Destination Port Range:22 (for SSH) or as required by your application.
* Add an egress rule:
* Destination CIDR:0.0.0.0/0
* IP Protocol:All
* Save the changes.
* Note the VCN OCID:
* Return to the VCN details page for IAD-SP-PBT-VCN-01.
* Copy theOCIDdisplayed (e.g., ocid1.vcn.oc1..<unique_string>).
OCID of the Created VCN
* Enter the OCID of the created VCN (IAD-SP-PBT-VCN-01) into the text box. The exact OCID will be available after Step 3 (e.g., ocid1.vcn.oc1..<unique_string>).
質問 # 20
Task 6: Create Load Balancer and Attach Certificate
Create a Load Balancer with the name PBT-CERT-LB-01 in subnet LB-Subnet-PBT-CERT-SNET-02 Create a Listener for the load balancer, where:
Name: PBT-CERT-LB_LTSN_01
Protocol: HTTPS
Port: 443
Attach the certificate PBT-CERT-01-<username> to the load balancer
Attach the security list PBT-CERT-LB-SL-01 to subnet LB-Subnet-PBT-CERT-SNET-02 See the solution below in Explanation.
正解：
解説：
Task 6: Create Load Balancer and Attach Certificate
Step 1: Create the Load Balancer
* Log in to the OCI Console.
* Navigate toNetworking>Load Balancers.
* ClickCreate Load Balancer.
* Enter the following details:
* Name: PBT-CERT-LB-01
* Compartment: Select your assigned compartment.
* Load Balancer Type: SelectPublic.
* Virtual Cloud Network: Select PBT-CERT-VCN-01.
* Subnet: Select LB-Subnet-PBT-CERT-SNET-02.
* Shape: Choose a shape (e.g., 10 Mbps, adjust based on needs).
* ClickNext.
* Leave backend sets and listeners as default for now (we'll configure the listener next).
* ClickCreate Load Balancerand wait for it to be provisioned.
Step 2: Create a Listener
* Once the load balancer is created, go to theLoad Balancerspage and click on PBT-CERT-LB-01.
* UnderResources, clickListeners.
* ClickCreate Listener.
* Enter the following details:
* Name: PBT-CERT-LB_LTSN_01
* Protocol: SelectHTTPS.
* Port: Enter 443.
* Certificate: ClickAdd Certificate, then select the PBT-CERT-01<username> certificate (e.g., PBT-CERT-0199008677labuser01) created in Task 5.
* Leave other settings (e.g., SSL handling) as default unless specified.
* ClickCreate.
Step 3: Configure the Backend Set
* In the PBT-CERT-LB-01 details page, underResources, clickBackend Sets.
* ClickCreate Backend Set(if not already created).
* Enter basic details (e.g., name like PBT-CERT-BS-01).
* Add a backend server:
* IP Address: Use the private IP of PBT-CERT-VM-01 (find this in the instance details under Compute>Instances).
* Port: 80 (HTTP, as configured on the web server).
* Protocol: HTTP.
* ClickCreate.
Step 4: Attach the Security List to the Subnet
* Navigate toNetworking>Virtual Cloud Networks.
* Select PBT-CERT-VCN-01 and clickSubnets.
* Click on LB-Subnet-PBT-CERT-SNET-02.
* UnderSecurity Lists, ensure PBT-CERT-LB-SL-01 is attached. If not:
* ClickEdit.
* Remove the default security list and add PBT-CERT-LB-SL-01.
* ClickSave Changes.
Step 5: Verify the Configuration
* Ensure the load balancer health status is OK (check underBackend Sets>Health).
* Test by accessing https://<load-balancer-public-ip> in a browser (replace with the public IP from the load balancer details).
質問 # 21
A company is securing its compute instances (VMs and Bare Metal Machines) in Oracle Cloud infrastructure (OCI) using a network firewall. As shown in the diagram, traffic flows from the internet Gateway (IGW) to the firewall in the Public DMZ Subnet, and then to the compute instances in the Public Subnet.
When configuring security lists and network security groups (NSGs) in this setup, what should they consider?
- A. Security list and NSG rules associated with the firewall subnet and VNICs are evaluated after the firewall.
- B. If the policy used with the firewall has no rules specified, the firewall allows all traffic.
- C. Add stateful rules to the security list attached to the firewall subnet or include the firewall in an NSG containing stateful rules for better performance.
- D. Ensure that any security list or NSG rules allow the traffic to enter the firewall for appropriate evaluation.
正解：D
質問 # 22
Task 2: Create a Compute Instance and Install the Web Server
Create a compute instance, where:
Name: PBT-CERT-VM-01
Image: Oracle Linux 8
Shape: VM.Standard.A1.Flex
Subnet: Compute-Subnet-PBT-CERT
Install and configure Apache web server:
a.
Install Apache
sudo yum -y install httpd
b.
Enable and start Apache
sudo systemctl enable httpd
sudo systemctl restart httpd
2. Install and configure Apache web server:
a. Install Apache
sudo yum -y install httpd
b. Enable and start Apache
sudo systemctl enable httpd
sudo systemctl restart httpd
c. Configure firewall to allow HTTP traffic (port 80)
sudo firewall-cmd --permanent --add-port=80/tcp
sudo firewall-cmd --reload
d. Create an index.html file
sudo bash -c 'echo You are visiting Web Server 1 >> /var/www/html/index.html' Enter the OCID of the created compute instance PBT-CERT-VM-01 in the text box below.
正解：
解説：
See the solution below in Explanation.
Explanation:
Task 2: Create a Compute Instance and Install the Web Server
Step 1: Create the Compute Instance
* Log in to the OCI Console.
* Navigate toCompute>Instances.
* ClickCreate Instance.
* Enter the following details:
* Name: PBT-CERT-VM-01
* Compartment: Select your assigned compartment.
* Placement: Leave as default or select an availability domain (e.g., Availability Domain 1).
* Image: ClickChange Image, selectOracle Linux 8, and confirm.
* Shape: ClickChange Shape, selectVM.Standard.A1.Flex, and configure:
* OCPUs: 1 (or adjust as needed)
* Memory: 6 GB (or adjust as needed)
* Networking:
* Virtual Cloud Network: Select PBT-CERT-VCN-01.
* Subnet: Select Compute-Subnet-PBT-CERT.
* Leave public IP assignment enabled for internet access.
* SSH Key: Provide your public SSH key (upload or paste) for secure access.
* ClickCreateand wait for the instance to be provisioned.
Step 2: Connect to the Compute Instance
* Once the instance is created, note thePublic IP Addressfrom the instance details page.
* Use an SSH client to connect:
* Command: ssh -i <private-key-file> opc@<public-ip-address>
* Replace <private-key-file> with your private key path and <public-ip-address> with the instance' s public IP.
Step 3: Install and Configure Apache Web Server
* Install Apache:
* Run: sudo yum -y install httpd
* Enable and Start Apache:
* Run: sudo systemctl enable httpd
* Run: sudo systemctl restart httpd
* Configure Firewall to Allow HTTP Traffic (Port 80):
* Run: sudo firewall-cmd --permanent --add-port=80/tcp
* Run: sudo firewall-cmd --reload
* Create an index.html File:
* Run: sudo bash -c 'echo "You are visiting Web Server 1" >> /var/www/html/index.html' Step 4: Verify the Configuration
* Open
a web browser and enter http://
<public-ip-address> to ensure the page displays "You are visiting Web Server 1".
* If needed, troubleshoot by checking Apache status: sudo systemctl status httpd.
Step 5: Retrieve and Enter the OCID
* Go to the instance details page for PBT-CERT-VM-01 underCompute>Instances.
* Copy theOCID(a long string starting with ocid1.instance., unique to your tenancy).
* Enter the copied OCID exactly as it appears into the text box provided.
Notes
* These steps are based on OCI Compute documentation and Oracle Linux 8 setup guides.
* Ensure the security list PBT-CERT-CS-SL-01 allows inbound traffic on port 22 (SSH) and port 80 (HTTP) if not already configured.
* The OCID will be unique to your instance; obtain it from the OCI Console after creation
質問 # 23
"A company, ABC, is planning to launch a new web application on OCI. Based on past experiences, they expect a significant surge in traffic after the launch. You are responsible for ensuring that the application is highly available.
Which step would you perform to achieve this goal?
- A. Use a load balancer to distribute incoming traffic evenly across multiple instances of the web application."
- B. Configure Cloud Guard to prevent large amounts of traffic from reaching the web application.
- C. Use a Virtual Cloud Network (VCN) with subnets, security lists, and routing rules to isolate the web application from the Internet and other resources.
- D. Implement security controls, such as web application firewalls, to protect against common attack vectors.
正解：A
質問 # 24
When trying to encrypt plaintext using Command Line Interface (CLI), the developer gets a Service Error.
This is the command the developer tried to run:
What is the reason for this error?
- A. The user should pass the key version OCID instead of the key OCID.
- B. The developer forgot to specify the region.
- C. The developer has the wrong endpoint.
- D. The plaintext needs to be in JSON form.
正解：A
質問 # 25
You're managing an Oracle Cloud Infrastructure (OCI) environment where a public website hosts downloadable assets stored in Object Storage buckets. These buckets need to be publicly accessible for website visitors, but Cloud Guard keeps flagging them as security risks.
How can Cloud Guard be configured to ignore problems specific to public buckets while still ensuring security checks are applied to other resources that require them?
- A. A public bucket is a security risk, so Cloud Guard will keep detecting it.
- B. Dismiss problems associated with those resources.
- C. Resolve or remediate the problems by making the buckets private.
- D. Fix the baseline by configuring the Conditional groups for the detector.
正解：D
質問 # 26
Task 5: Create a Certificate
Create a certificate, where:
Certificate name: PBT-CERT-01-<username>
For example, if your username is 99008677-lab.user01, then the certificate name should be PBT-CERT-
01990086771abuser01
Ensure you eliminate special characters from the user name.
Common name: PBT-CERT-OCICERT-01
Certificate Authority: PBT-CERT-CA-01 (created in the previous task)
正解：
解説：
See the solution below in Explanation.
Explanation:
Since I can't create resources or retrieve OCIDs directly in your OCI environment, I'll provide a step-by-step solution based on verified OCI documentation and best practices as of 02:30 PM BST on Thursday, June 12,
2025. Follow these instructions precisely in the OCI Console or CLI, using the preconfigured PBI_Vault_SP vault and the PBT-CERT-CA-01<username> Certificate Authority created in the previous task. Replace
<username> with your actual username (e.g., 99008677-lab.user01), ensuring special characters are removed.
Task 5: Create a Certificate
Step 1: Access the OCI Vault
* Log in to the OCI Console.
* Navigate toIdentity & Security>Vault.
* Select the root compartment.
* Locate and click on the vault named PBI_Vault_SP.
Step 2: Create the Certificate
* In the PBI_Vault_SP vault details page, underResources, clickCertificates.
* ClickCreate Certificate.
* Enter the following details:
* Name: Replace <username> with your username (e.g., if your username is 99008677-lab.user01, remove special characters like - and . to get 99008677labuser01, then use PBT-CERT-
0199008677labuser01).
* Common Name: Enter PBT-CERT-OCICERT-01.
* Certificate Authority: Select the PBT-CERT-CA-01<username> CA created in Task 4 (e.g., PBT-CERT-CA-0199008677labuser01).
* Subject: Leave as default or adjust (e.g., Organization, Country) if required.
* Validity Period: Set as needed (e.g., 1 year), or use the default.
* Compartment: Ensure it's set to the root compartment.
* ClickCreate Certificateand wait for the certificate to be issued.
Step 3: Verify the Certificate
* After creation, go to theCertificatessection under PBI_Vault_SP.
* Confirm the certificate PBT-CERT-01<username> (e.g., PBT-CERT-0199008677labuser01) is listed and its status is active.
質問 # 27
"A programmer is developing a Node.js application which will run on a Linux server on their on-premises data center. This application will access various Oracle Cloud Infrastructure (OCI) services using OCI SDKs.
What is the secure way to access OCI services with OCI Identity and Access Management (IAM)?
- A. Create a new OCI IAM user associated with a dynamic group and a policy that grants the desired permissions to OCI services. Add the on-premises Linux server in the dynamic group.
- B. Create a new OCI IAM user, add the user to a group associated with a policy that grants the desired permissions to OCI services. In the on-premises Linux server, generate the keypair used for signing API requests and upload the public key to the IAM user.
- C. Create a new OCI IAM user, add the user to a group associated with a policy that grants the desired permissions to OCI services. In the on-premises Linux server, add the user name and password to a file used by Node.js authentication.
- D. Create an OCI IAM policy with appropriate permissions to access the required OCI services and assign the policy to the on-premises Linux server."
正解：B
質問 # 28
Challenge 2 -Task 1
In deploying a new application, a cloud customer needs to reflect different security postures. If a security zone is enabled with the Maximum Security Zone recipe, the customer will be unable to create or update a resource in the security zone if the action violates the attached Maximum Security Zone policy.
As an application requirement, the customer requires a compute instance in the public subnet. You therefore, need to configure Custom Security Zones that allow the creation of compute instances in the public subnet.
Review the architecture diagram, which outlines the resoures you'll need to address the requirement:
Preconfigured
To complete this requirement, you are provided with the following:
Access to an OCI tenancy, an assigned compartment, and OCI credentials
Required IAM policies
Task 1: Create a Custom Security Zone Recipe
Create a Custom Security Zone Recipe named IAD-SP-PBT-CSP-01 that allows the provisioning of compute instances in the public subnet.
Enter the OCID of the created custom security zone recipe in the text box below.
正解：
解説：
See the solution below in Explanation.
Explanation:
To create a Custom Security Zone Recipe named IAD-SP-PBT-CSP-01 that allows the provisioning of compute instances in a public subnet, we will follow the steps outlined in the Oracle Cloud Infrastructure (OCI) Security Zones documentation. These steps are based on verified procedures from the OCI Security Zone Guide and related resources.
Step-by-Step Solution for Task 1: Create a Custom Security Zone Recipe
* Log in to the OCI Console:
* Use your OCI credentials to log in to the OCI Console (https://console.us-ashburn-1.oraclecloud.
com).
* Ensure you have access to the assigned compartment provided in the tenancy.
* Navigate to Security Zones:
* From the OCI Console, go to the navigation menu (hamburger icon) on the top left.
* UnderGovernance and Administration, selectSecurity Zones.
* Create a New Security Zone Recipe:
* In the Security Zones dashboard, click on theRecipestab.
* Click theCreate Recipebutton.
* Configure the Recipe Details:
* Name:Enter IAD-SP-PBT-CSP-01.
* Description:(Optional) Add a description, e.g., "Custom recipe to allow compute instances in public subnet."
* Leave theCompartmentas the assigned compartment provided.
* Define the Security Zone Policy:
* In the policy editor, start with a base policy. Since the Maximum Security Zone recipe restricts public subnet usage, you need to customize it.
* Add the following policy statement to allow compute instances in a public subnet:
Allow service compute to use virtual-network-family in compartment <compartment-name> where ALL { target.resource.type = 'Instance', target.vcn.cidr_block = '10.0.0.0/16', target.subnet.cidr_block = '10.0.10.0/24'
}
* Replace <compartment-name> with the name of your assigned compartment.
* This policy allows the Compute service to provision instances in the public subnet (10.0.10.0/24) within the VCN (10.0.0.0/16).
* Adjust Restrictions:
* Ensure the recipe does not inherit the Maximum Security Zone recipe's default restrictions that block public subnet usage. Explicitly allow the public subnet by including the subnet CIDR block (10.0.10.0/24) in the policy.
* Remove or modify any conflicting default rules that prohibit public subnet usage (e.g., rules blocking internet access or public IP assignment).
* Save the Recipe:
* ClickCreateto save the custom security zone recipe.
* Once created, note theOCIDof the recipe from the recipe details page. The OCID will be a unique identifier starting with ocid1.securityzonerecipe.
* Verify the Recipe:
* Go to theRecipestab and locate IAD-SP-PBT-CSP-01.
* Ensure the policy reflects the allowance for compute instances in the public subnet by reviewing the policy statement.
OCID of the Created Custom Security Zone Recipe
* The exact OCID will be generated upon creation (e.g., ocid1.securityzonerecipe.oc1..unique_string).
Please enter the OCID displayed in the OCI Console after completing Step 7.
Notes
* Ensure IAM policies are correctly configured to grant you permissions to create and manage security zone recipes in the compartment.
* The policy assumes the public subnet CIDR (10.0.10.0/24) matches the diagram. Adjust if the actual subnet CIDR differs.
* Test the recipe by associating it with a security zone and attempting to launch a compute instance to confirm compliance.
質問 # 29
Challenge 1 - Task 1
Integrate TLS Certificate Issued by the OCI Certificates Service with Load Balancer You are a cloud engineer at a tech company that is migrating its services to Oracle Cloud Infrastructure (OCI). You are required to set up secure communication for your web application using OCI's Certificate service. You need to create a Certificate Authority (CA), issue a TLS/SSL server certificate, and configure a load balancer to use this certificate to ensure encrypted traffic between clients and the backend servers.
Review the architecture diagram, which outlines the resources you'll need to address the requirement.
Preconfigured
To complete this requirement, you are provided with the following:
Access to an OCI tenancy, an assigned compartment, and OCI credentials
Required IAM policies
OCI Vault to store the secret required by the program, which is created in the root compartment as PBI_Vault_SP Task 1: Create and Configure a Virtual Cloud Network (VCN) Create a Virtual Cloud Network (VCN) namedPBT-CERT-VCN-01with the following specifications:
* VCN with a CIDR block of 10.0.0.0/16
* Subnet 1 (Compute Instance):
* Name:Compute-Subnet-PBT-CERT
* CIDR Block:10.0.1.0/24
Subnet 2 (Load Balancer):
* Name:LB-Subnet-PBT-CERT-SNET-02
* CIDR Block:10.0.2.0/24
Internet Gatewayfor external connectivity
Route table and security lists:
* Security List namedPBT-CERT-CS-SL-01for Subnet 1 (Compute-Subnet-PBT-CERT) to allow SSH (port 22) traffic
* Security List namedPBT-CERT-LB-SL-01for Subnet 2 (LB-Subnet-PBT-CERT) to allow HTTPS (port 443) traffic
"Enter the OCID of the created VCN in the text box below.
正解：
解説：
See the solution below in Explanation.
Explanation:
Challenge 1: Integrate TLS Certificate Issued by the OCI Certificates Service with Load Balancer Task 1: Create and Configure a Virtual Cloud Network (VCN) Step 1: Create the Virtual Cloud Network (VCN)
* Log in to the OCI Console.
* Navigate toNetworking>Virtual Cloud Networks.
* ClickCreate Virtual Cloud Network.
* SelectVCN with Internet Connectivity(to include an Internet Gateway by default).
* Enter the following details:
* Name: PBT-CERT-VCN-01
* Compartment: Select your assigned compartment.
* VCN CIDR Block: 10.0.0.0/16
* Leave other settings as default (e.g., create a new public subnet and route table).
* ClickCreate Virtual Cloud Network. Wait for the VCN to be created.
Step 2: Create Subnet 1 (Compute-Subnet-PBT-CERT)
* In the VCN details page for PBT-CERT-VCN-01, clickSubnetsunderResources.
* ClickCreate Subnet.
* Enter the following details:
* Name: Compute-Subnet-PBT-CERT
* Subnet Type: Regional
* CIDR Block: 10.0.1.0/24
* Route Table: Select the default route table created with the VCN.
* Subnet Access: Public Subnet (to allow internet access).
* DNS Resolution: Enabled.
* ClickCreate.
Step 3: Create Subnet 2 (LB-Subnet-PBT-CERT-SNET-02)
* In the VCN details page, clickSubnetsunderResources.
* ClickCreate Subnet.
* Enter the following details:
* Name: LB-Subnet-PBT-CERT-SNET-02
* Subnet Type: Regional
* CIDR Block: 10.0.2.0/24
* Route Table: Select the default route table created with the VCN.
* Subnet Access: Public Subnet (to allow internet access for the load balancer).
* DNS Resolution: Enabled.
* ClickCreate.
Step 4: Verify Internet Gateway
* In the VCN details page, underResources, clickInternet Gateways.
* Ensure an Internet Gateway is listed and attached to PBT-CERT-VCN-01. If not created, clickCreate Internet Gateway, name it (e.g., PBT-CERT-IGW), and attach it.
Step 5: Configure Route Table
* In the VCN details page, underResources, clickRoute Tables.
* Select the default route table or create a new one named PBT-CERT-RT-01.
* ClickAdd Route Rule. 4 -Destination CIDR Block: 0.0.0.0/0
* Target Type: Internet Gateway
* Target: Select the Internet Gateway created (e.g., PBT-CERT-IGW).
* ClickAdd Route Ruleand save.
Step 6: Create Security List for Subnet 1 (Compute-Subnet-PBT-CERT)
* In the VCN details page, underResources, clickSecurity Lists.
* ClickCreate Security List.
* Enter the following:
* Name: PBT-CERT-CS-SL-01
* Compartment: Your assigned compartment.
* Add the following ingress rule:
* Source CIDR: 0.0.0.0/0 (allow from any source, adjust as per security needs)
* IP Protocol: TCP
* Source Port Range: All
* Destination Port Range: 22 (for SSH)
* Allows: Traffic
* ClickCreate.
Step 7: Create Security List for Subnet 2 (LB-Subnet-PBT-CERT-SNET-02)
* In the VCN details page, underResources, clickSecurity Lists.
* ClickCreate Security List.
* Enter the following:
* Name: PBT-CERT-LB-SL-01
* Compartment: Your assigned compartment.
* Add the following ingress rule:
* Source CIDR: 0.0.0.0/0 (allow from any source, adjust as per security needs)
* IP Protocol: TCP
* Source Port Range: All
* Destination Port Range: 443 (for HTTPS)
* Allows: Traffic
* ClickCreate.
Step 8: Retrieve and Enter VCN OCID
* Go to the VCN details page for PBT-CERT-VCN-01.
* Copy theOCIDfrom the VCN information section.
* Enter the OCID in the provided text box.
質問 # 30
A company has implemented OCI IAM policies with multiple levels of compartments. A policy attached to a parent compartment grants "manage virtual-network-family" permissions. A policy attached to a child compartment grants "use virtual-network-family" permissions.
According to OCI IAM policy inheritance, how does the OCI IAM policy engine resolve the permissions for a user attempting to perform an operation that requires 'manage' permissions in the child compartment?
- A. The policy in the parent compartment takes precedence, and the user is granted "manage" permissions.
- B. The operation is denied due to conflicting policies.
- C. The policy in the child compartment takes precedence, and the user is granted "use" permissions only.
正解：A
質問 # 31
......
GoShiken 1z0-1104-25試験練習テスト問題：https://www.goshiken.com/Oracle/1z0-1104-25-mondaishu.html
1z0-1104-25試験問題解答：https://drive.google.com/open?id=1aoOdWxpmy_wv6c91mb1QuELAChAJizpk