Oracle Cloud Infrastructure 2022 Security Professional練習テスト2023年最新の1z0-1104-22ストレスなしで合格させちゃう！
練習Oracle Cloud Infrastructure 1z0-1104-22問題集オンライン試験練習テストと詳細な解説付き！
質問 # 38
Which statement is true about standards?
- A. They are result of a regulation or contractual requirement or an industry requirement.
- B. They are methods and instructions on how to maintain or accomplish the directives of the policy.
- C. They may be audited.
- D. They are the foundation of corporate governance.
正解：A
質問 # 39
What must be configured for a load balancer to accept incoming traffic?
- A. Service Gateway
- B. SSL certificate
- C. Listener
- D. Route table entry pointing to the listener IP address
正解：C
解説：
A listener is an entity that checks for connection requests. The load balancer listener listens for ingress client traffic using the port you specify within the listener and the load balancer's public IP.
https://docs.oracle.com/en-us/iaas/Content/GSG/Tasks/loadbalancing.htm
To create a listener:
On your Load Balancer Details page, click Listeners.
Click Create Listener.
Enter the following:
Name: Enter a friendly name. Avoid entering confidential information.
Protocol: Select HTTP.
Port: Enter 80 as the port on which to listen for incoming traffic.
Backend Set: Select the backend set you created.
Click Create.
質問 # 40
Which of the following is necessary step when creating a secret in vault?
- A. Digest Hash should be created of the secret value
- B. Vault-managed key is necessary to encrypt the secret
- C. Shamir's secret sharing algorithm should be used to unseal the vault
- D. Object Storage must be created to run secret service
正解：B
解説：
https://docs.oracle.com/en/database/other-databases/essbase/21/essad/create-vault-and-secrets.html
質問 # 41
What information do you get by using the Network Visualizer tool?
- A. State of subnets in a VCN
- B. Organization of subnets and VLANs across availability domains
- C. Interconnectivity of VCNs
- D. Routes defined between subnets and gateways
正解：C
解説：
https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/network_visualizer.htm You can view and understand the following from this diagram:
How VCNs are inter-connected
How on-premises networks are connected (using FastConnect or Site-to-Site VPN) Which routing entities (DRGs and so on) control traffic routing How your transit routing is configured
質問 # 42
What is the matching rule syntax for a single condition?
- A. Option A
- B. Option C
- C. Option D
- D. Option B
正解：B
解説：
質問 # 43
Which storage type is most effective when you want to move some unstructured data, consisting of images and videos, to cloud storage?
- A. Archive storage
- B. File storage
- C. Block volume
- D. Standard storage
正解：D
解説：
Use Oracle Cloud Infrastructure Object Storage for data to which you need fast, immediate, and frequent access. Data accessibility and performance justifies a higher price point to store data in the Object Storage tier.
The Object Storage service can store an unlimited amount of unstructured data of any content type, including analytic data and rich content, like images and videos.
https://docs.oracle.com/en/solutions/learn-migrate-app-data-to-cloud/considerations-object-storage.html#GUID-AC192B08-5160-4DA7-B43E-001753D99CF1
質問 # 44
Select the component that encompasses the overall configuration of your WAF service on OCI.
- A. Bot Management
- B. Protection rules
- C. Web Application Firewall policy
- D. Origin
正解：C
解説：
WAF Policy Management
Provides an overview of web application firewall (WAF) policies, including their creation, updating, and deletion.
WAF policies encompass the overall configuration of your WAF service, including access rules, rate limiting rules, and protection rules.
https://docs.oracle.com/en-us/iaas/Content/WAF/Policies/waf-policy_management.htm
質問 # 45
For how long are API calls audited and available?
- A. 60 days
- B. 90 days
- C. 365 days
- D. 30 days
正解：B
質問 # 46
Which OCI service can index, enrich, aggregate, explore, search, analyze, correlate, visualize and monitor data?
- A. Data Safe
- B. Data Guard
- C. Logging Analytics
- D. WAF
正解：C
解説：
質問 # 47
Bot Management in OCI provides which of the features? Select TWO correct answers.
- A. Good Bot Allowlist
- B. Bad Bot Denylist
- C. CAPTCHA Challenge
- D. IP Prefix Steering
正解：A、C
解説：
質問 # 48
Operations team has made a mistake in updating the secret contents and immediately need to resume using older secret contents in OCI Secret Management within a Vault.
As a Security Administrator, what step should you perform to rollback to last version? Select TWO correct answers.
- A. Upload new secret and mark as 'Pending'. Promote this secret version as 'Current'
- B. Mark the secret version as 'Rewind'
- C. Mark the secret version as 'Previous'
- D. Mark the secret version as 'deprecated'
正解：A、C
解説：
質問 # 49
When creating an OCI Vault, which factors may lead to select the Virtual Private Vault ? Select TWO correct answers
- A. Need for more than 9211 key versions
- B. To mask Pll data for non-production environment
- C. Greater degree of isolation
- D. Ability to back up the vault
正解：C、D
解説：
質問 # 50
A company needs to have some buckets as public in the compartment. You want Cloud Guard to ignore the problem associated with public bucket. Select TWO correct answers
- A. Dismiss the issues associated with these resources
- B. Configure Conditional groups for the detector to fix base line
- C. First make the bucket private and after few days make the bucket public again
- D. Make the bucket private so that Cloud Guard won't detect it
正解：A、B
質問 # 51
Which WAF service component must be configured to allow, block, or log network requests when they meet specified criteria?
- A. Web Application Firewall policy
- B. Bot Management
- C. Protection rules
- D. Origin
正解：C
解説：
Protection rules
Protection rules can be configured to either allow, block, or log network requests when they meet the specified criteria of a protection rule. The WAF will observe traffic to your web application over time and suggest new rules to apply.
https://www.oracle.com/security/cloud-security/what-is-waf/
質問 # 52
As a security architect, how can you prevent unwanted bots while desirable bots are allowed to enter?
- A. Vault
- B. Compartments
- C. Web Application Firewall (WAF)
- D. Data Guard
正解：C
質問 # 53
A company has OCI tenancy which has mount target associated with two File Systems, CG_1 and CG_2. These File Systems are accessed by IP-based clients AB_1 and AB_2 respectively. As a security administrator, how can you provide access to both clients such that CGI has Read only access on AB1 and CG_2 has Read/Write access on AB_2?
- A. Vault
- B. NFS v3 Unix Security
- C. Access Control Lists
- D. NFS Export Option
正解：B、D
解説：
質問 # 54
You create a new compartment, "apps," to host some production apps and you create an apps_group and added users to it.
What would you do to ensure the users have access to the apps compartment?
- A. Add an lAM policy to attach tenancy to the apps group.
- B. No action is required.
- C. Add an IAM policy for the individual users to access the apps compartment.
- D. Add an IAM policy for apps_group granting access to the apps compartment.
正解：D
質問 # 55
As a security administrator, you want to create cloud resources that align with Oracle's security principles and best practices. Which security service should you use?
- A. Cloud Guard
- B. Web Application Firewall (WAF)
- C. Security Advisor
- D. Identity and Access Management
正解：C
解説：
質問 # 56
what is the use case for Oracle cloud infrastructure logging analytics service?
- A. automatically create instances to collect logs analysis and send reports
- B. automatically and manage any log based on a subscription model
- C. labels data packets that pass through the internet gateway
- D. monitors, aggregates, indexes and analyzes all log data from on-premises.
正解：D
解説：
Oracle Cloud Infrastructure Logging Analytics is a machine learning-based cloud service that monitors, aggregates, indexes, and analyzes all log data from on-premises and multicloud environments. Enabling users to search, explore, and correlate this data to troubleshoot and resolve problems faster and derive insights to make better operational decisions.
https://www.oracle.com/manageability/logging-analytics/
質問 # 57
A member of operations team has set Pre-Authenticated Request (PAR) associated with a bucket to an incorrect date and now wants to edit the PAR request. How can this be achieved?
- A. Delete both PAR as well as the bucket then recreate both
- B. Don't set an expiration time for PAR
- C. Delete the PAR and recreate it with the required date
- D. Delete the bucket associated with PAR and recreate it
正解：C
解説：
質問 # 58
As a solutions architect, you need to assist operations team to write an I AM policy to give users in group-uat1 and group- uat2 access to manage all resources in the compartment Uat. Which is the CORRECT IAM policy ?
- A. Allow group group-uat1 group-uat2 to manage all resources in compartment Uat
- B. Allow any-user to manage all resources in compartment Uat where request.group=/group-uat/*
- C. Allow any-user to manage all resources in tenancy where target.compartment= Uat
- D. Allow group /group-uat*/ to manage all resources in compartment Uat
正解：A
質問 # 59
......
最適な1z0-1104-22試験学習資料と準備材料を提供しています：https://www.goshiken.com/Oracle/1z0-1104-22-mondaishu.html