Oracle 1z0-1104-21 Actual Free Exam Questions & Community Discussion

Exam Code/Number: 1z0-1104-21
Exam Name/Title: Oracle Cloud Infrastructure Security 2021 Associate
Certification Provider: Oracle
Corresponding Certification: Oracle Cloud Infrastructure

Exam Questions: 96
Updated On: Jul 06, 2026

Question #41

With regard to vulnerability and cloud penetration testing, which rules of engagement apply? Select TWO correct answers.

A. Any port scanning must be performed in an aggressive mode

B. Testing should target any other subscription or any other Oracle Cloud customer resources

C. You are responsible for any damages to Oracle Cloud customers that are caused by your testing activities

D. Physical penetration and vulnerability testing of Oracle facilities is prohibited

Discussion 0

Correct Answer: C,D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #42

Oracle Object Storage achieves data durability by which of the mechanisms ? Select TWO correct answers

A. Redundant Storage across availability domains

B. Redundant Array of Independent Disks

C. Service Gateway

D. Object Versioning

Discussion 0

Correct Answer: A,D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #43

You create a new compartment, "apps," to host some production apps and you create an apps_group and added users to it.
What would you do to ensure the users have access to the apps compartment?

A. Add an lAM policy to attach tenancy to the apps group.

B. Add an IAM policy for the individual users to access the apps compartment.

C. Add an IAM policy for apps_group granting access to the apps compartment.

D. No action is required.

Discussion 0

Correct Answer: C Vote an answer

Question #44

Which architecture is based on the principle of "never trust, always verify"?

A. Federated identity

B. Defense in depth

C. Zero trust

D. Fluid perimeter

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #45

Which of the following is necessary step when creating a secret in vault?

A. Shamir's secret sharing algorithm should be used to unseal the vault

B. Digest Hash should be created of the secret value

C. Vault-managed key is necessary to encrypt the secret

D. Object Storage must be created to run secret service

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #46

Which statement is true about Oracle Cloud Infrastructure (OCI) Object Storage server-side encryption?

A. All the traffic to and from object storage is encrypted by using Transport Layer Security.

B. Encryption is not enabled by default.

C. Each object in a bucket is always encrypted with the same data encryption key.

D. Customer-provided encryption keys are never stored in OCI Vault service.

Discussion 0

Correct Answer: A Vote an answer

Question #47

As a security architect, how can you prevent unwanted bots while desirable bots are allowed to enter?

A. Compartments

B. Web Application Firewall (WAF)

C. Vault

D. Data Guard

Discussion 0

Correct Answer: B Vote an answer

Question #48

What would you use to make Oracle Cloud Infrastructure Identity and Access Management govern resources in a tenancy?

A. Dynamic groups

B. Policies

C. Users

D. Groups

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #49

Which Cloud Guard component identifies issues with resources or user actions and alerts you when an issue is found?

A. Problems

B. Detectors

C. Responders

D. Targets

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #50

A company needs to have some buckets as public in the compartment. You want Cloud Guard to ignore the problem associated with public bucket. Select TWO correct answers

A. Configure Conditional groups for the detector to fix base line

B. First make the bucket private and after few days make the bucket public again

C. Make the bucket private so that Cloud Guard won't detect it

D. Dismiss the issues associated with these resources

Discussion 0

Correct Answer: A,D Vote an answer

Download Free Oracle 1z0-1104-21 Demo

Simply submit your e-mail address below to get started with our free demo of your Oracle 1z0-1104-21 exam.