Oracle 1z0-1104-21 Actual Free Exam Questions & Community Discussion

Exam Code/Number: 1z0-1104-21
Exam Name/Title: Oracle Cloud Infrastructure Security 2021 Associate
Certification Provider: Oracle
Corresponding Certification: Oracle Cloud Infrastructure

Exam Questions: 96
Updated On: Jul 06, 2026

Question #11

Which security issues can be identified by Oracle Vulnerability Scanning Service? Select TWO correct answers

A. SQL Injection

B. CIS published Industry-standard benchmarks

C. Ports that are unintentionally left open can be a potential attack vector for cloud resources

D. Distributed Denial of Service (DDoS)

Discussion 0

Correct Answer: B,C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #12

You want to include all instances in any of two or more compartments, which syntax should you use for dynamic policy you want to create for "Prod" compartment and "SIT" compartment?
Prod OCID : 'JON.Prod'
SIT OCID : 'JON.SIT'

A. Any { instance.compartment.id = 'JON.Prod', instance.compartment.id = 'JON.SIT'

B. All { instance in compartment 'Prod' and Compartment 'SIT' }

C. All { instance.compartment.id = 'JON.Prod', instance.compartment.id = 'JON.SIT'

D. Any { instance in compartment 'Prod' and Compartment 'SIT' }

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #13

you want to create a stateless rule for SSH in security list and the ingress role has already been properly configured what combination should you use on the engress role what commination should you use on the egress rule?

A. select udp for protocol: enter 22 for source port" and all for destination port

B. select tcp for protocol: enter all for source port" and 22 for destination port.

C. select tcp for protocol: enter 22 for source port" and 22 for destination port

D. select tcp for protocol: enter 22 for source port" and all for destination port

Discussion 0

Correct Answer: B Vote an answer

Question #14

In which two ways can you improve data durability in Oracle Cloud Infrastructure Object Storage?

A. Enable client-side encryption

B. Enable Versioning

C. Enable server-side encryption

D. Limit delete permissions

E. Setup volumes in a RAID1 configuration

Discussion 0

Correct Answer: E Vote an answer

Question #15

Where are logs stored?

A. OCI File Storage

B. OCI Object Storage

C. Cloud Agent

D. OCI Block Storage

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #16

On which option do you set Oracle Cloud Infrastructure Budget?

A. Compartments

B. Instances

C. Tenancy

D. Free-form tags

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #17

As a solutions architect, you need to assist operations team to write an I AM policy to give users in group-uat1 and group- uat2 access to manage all resources in the compartment Uat. Which is the CORRECT IAM policy ?

A. Allow group group-uat1 group-uat2 to manage all resources in compartment Uat

B. Allow any-user to manage all resources in tenancy where target.compartment= Uat

C. Allow group /group-uat*/ to manage all resources in compartment Uat

D. Allow any-user to manage all resources in compartment Uat where request.group=/group-uat/*

Discussion 0

Correct Answer: A Vote an answer

Question #18

Which statements are CORRECT about Security Zone policy in OCI ? Select TWO correct answers

A. Bucket can't be moved from a security zone to a standard compartment

B. Resources in a security zone must be encrypted using customer-managed keys

C. Resources in a security zone must be accessible from internet

D. Block volume can be moved from a security zone to a standard compartment

Discussion 0

Correct Answer: A,B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #19

What information do you get by using the Network Visualizer tool?

A. State of subnets in a VCN

B. Organization of subnets and VLANs across availability domains

C. Interconnectivity of VCNs

D. Routes defined between subnets and gateways

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #20

As a lead Security Architect, you have tasked to restrict access to and from the worker nodes in pods running in Oracle Container Engine for Kubernetes?

A. Cloud Guard

B. Identity and Access Management

C. Vulnerability Scanning

D. Security Lists

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Download Free Oracle 1z0-1104-21 Demo

Simply submit your e-mail address below to get started with our free demo of your Oracle 1z0-1104-21 exam.