Oracle 1z0-1104-21 Actual Free Exam Questions & Community Discussion

Exam Code/Number: 1z0-1104-21
Exam Name/Title: Oracle Cloud Infrastructure Security 2021 Associate
Certification Provider: Oracle
Corresponding Certification: Oracle Cloud Infrastructure

Exam Questions: 96
Updated On: Jul 06, 2026

Question #1

Which is NOT a part of Observability and Management Services?

A. OCI Management Service

B. Logging Analytics

C. Event Services

D. Logging

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #2

Which type of firewalls are designed to protect against web application attacks, such as SQL injection and cross-site scripting?

A. Incident firewall

B. Packet filtering firewall

C. Web Application Firewall

D. Stateful inspection firewall

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #3

What are the security recommendations and best practices for Oracle Functions?

A. Define a policy statement that enables access to functions for requests coming from multiple IP addresses.

B. Grant privileges to UID and GID 1000, such that the functions running within a container acquire the default root capabilities.

C. Add applications to network security groups for fine-grained ingress/egress rules.

D. Ensure that functions in a VCN have restricted access to resources and services.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #4

Which VCN configuration is CORRECT with regard to VCN peering within a same region ?

A. 194.168.0.0/24 and 194.168.0.0/16

B. 12.0.0.0/16 and 12.0.0.0/16
C 194.168.0.0/24 and 194.168.0.0/24

C. 12.0.0.0/16 and 194.168.0.0/16

Discussion 0

Correct Answer: C Vote an answer

Question #5

Which cache rules criterion matches if the concatenation of the requested URL path and query are identical to the contents of the value field?

A. URL_PART_ENDS_WITH

B. URL_STARTS_WITH

C. URL_PART_CONTAINS

D. URL_IS

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #6

Operations team has made a mistake in updating the secret contents and immediately need to resume using older secret contents in OCI Secret Management within a Vault.
As a Security Administrator, what step should you perform to rollback to last version? Select TWO correct answers.

A. Mark the secret version as 'deprecated'

B. Upload new secret and mark as 'Pending'. Promote this secret version as 'Current'

C. Mark the secret version as 'Previous'

D. Mark the secret version as 'Rewind'

Discussion 0

Correct Answer: B,C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #7

What does the following identity policy do?
Allow group my-group to use fn-invocation in compartment ABC where target.function.id = '<function-OCID>'

A. Enables users to invoke all the functions in a compartment except for one specific function

B. Enables users to invoke all the functions in a specific application

C. Enables users in a group to create, update, and delete ALL applications and functions in a compartment

D. Enables users to invoke just one specific function

Discussion 0

Correct Answer: D Vote an answer

Question #8

Which IAM policy should be created to give XYZ the ability to list contents of a resource excluding the f needs to authenticate in prod compartment ? Principle of least priviledge should be used.

A. Allow group XYZ to use all resources in compartment != prod

B. Allow group XYZ to inspect all resources in tenancy where target.compartment.name != prod

C. Allow group XYZ to read all resources in tenancy where target.compartment.name != prod

D. Allow group XYZ to manage all resources in compartment != prod

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #9

Select the component that encompasses the overall configuration of your WAF service on OCI.

A. Origin

B. Protection rules

C. Web Application Firewall policy

D. Bot Management

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #10

Which parameters customers need to configure while reading secrets by name using CL1 or API? Select TWO correct answers.

A. Secret Name

B. ASCII Value

C. Certificates

D. Vault Id

Discussion 0

Correct Answer: A,D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Download Free Oracle 1z0-1104-21 Demo

Simply submit your e-mail address below to get started with our free demo of your Oracle 1z0-1104-21 exam.