Home
Oracle
1Z0-1104-25 Exam Info
1Z0-1104-25 Exam Questions

Curious about Actual Oracle Cloud (1Z0-1104-25) Exam Questions?

Here are sample Oracle Cloud Infrastructure 2025 Security Professional (1Z0-1104-25) Exam questions from real exam. You can get more Oracle Cloud (1Z0-1104-25) Exam premium practice questions at TestInsights.

Page: 1 /
Total 36 questions

Want more questions? Get Premium Access.

Question 1

"You are designing a secure access strategy for compute instances deployed within a private subnet of an OCI Virtual Cloud Network (VCN). Your security policy requires that no compute instances in the private subnet should have direct Internet access, and administrative access should be controlled.

Which statement best describes the role of an OCI Bastion in securing access to these private compute instances?

AIt provides a direct public endpoint for the compute instance, enabling remote access.

BIt serves as a secondary authentication point, verifying user credentials before granting access to the compute instance.

CIt acts as a firewall, blocking any external access to the private compute instance.

DIt creates a secure, publicly accessible entry point to access target resources in a private subnet.'

Correct : D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AIt provides a direct public endpoint for the compute instance, enabling remote access.

BIt serves as a secondary authentication point, verifying user credentials before granting access to the compute instance.

CIt acts as a firewall, blocking any external access to the private compute instance.

DIt creates a secure, publicly accessible entry point to access target resources in a private subnet.'

0 / 1500

Question 2

When trying to encrypt plaintext using Command Line Interface (CLI), the developer gets a Service Error. This is the command the developer tried to run:

1Z0-1104-25 Exam Question 2 Exhibit 1

What is the reason for this error?

AThe developer forgot to specify the region.

BThe user should pass the key version OCID instead of the key OCID.

CThe developer has the wrong endpoint.

DThe plaintext needs to be in JSON form.

Correct : B

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AThe developer forgot to specify the region.

BThe user should pass the key version OCID instead of the key OCID.

CThe developer has the wrong endpoint.

DThe plaintext needs to be in JSON form.

0 / 1500

Question 3

A company is securing its compute instances (VMs and Bare Metal Machines) in Oracle Cloud infrastructure (OCI) using a network firewall. As shown in the diagram, traffic flows from the internet Gateway (IGW) to the firewall in the Public DMZ Subnet, and then to the compute instances in the Public Subnet.

1Z0-1104-25 Exam Question 3 Exhibit 1

When configuring security lists and network security groups (NSGs) in this setup, what should they consider?

AIf the policy used with the firewall has no rules specified, the firewall allows all traffic.

BEnsure that any security list or NSG rules allow the traffic to enter the firewall for appropriate evaluation.

CAdd stateful rules to the security list attached to the firewall subnet or include the firewall in an NSG containing stateful rules for better performance.

DSecurity list and NSG rules associated with the firewall subnet and VNICs are evaluated after the firewall.

Correct : B

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AIf the policy used with the firewall has no rules specified, the firewall allows all traffic.

BEnsure that any security list or NSG rules allow the traffic to enter the firewall for appropriate evaluation.

CAdd stateful rules to the security list attached to the firewall subnet or include the firewall in an NSG containing stateful rules for better performance.

DSecurity list and NSG rules associated with the firewall subnet and VNICs are evaluated after the firewall.

0 / 1500

Question 4

"A company, ABC, is planning to launch a new web application on OCI. Based on past experiences, they expect a significant surge in traffic after the launch. You are responsible for ensuring that the application is highly available.

Which step would you perform to achieve this goal?

AUse a Virtual Cloud Network (VCN) with subnets, security lists, and routing rules to isolate the web application from the Internet and other resources.

BImplement security controls, such as web application firewalls, to protect against common attack vectors.

CConfigure Cloud Guard to prevent large amounts of traffic from reaching the web application.

DUse a load balancer to distribute incoming traffic evenly across multiple instances of the web application.'

Correct : D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AUse a Virtual Cloud Network (VCN) with subnets, security lists, and routing rules to isolate the web application from the Internet and other resources.

BImplement security controls, such as web application firewalls, to protect against common attack vectors.

CConfigure Cloud Guard to prevent large amounts of traffic from reaching the web application.

DUse a load balancer to distribute incoming traffic evenly across multiple instances of the web application.'

0 / 1500

Question 5

"A programmer is developing a Node.js application which will run on a Linux server on their on-premises data center. This application will access various Oracle Cloud Infrastructure (OCI) services using OCI SDKs.

What is the secure way to access OCI services with OCI Identity and Access Management (IAM)?

ACreate a new OCI IAM user, add the user to a group associated with a policy that grants the desired permissions to OCI services. In the on-premises Linux server, add the user name and password to a file used by Node.js authentication.

BCreate a new OCI IAM user, add the user to a group associated with a policy that grants the desired permissions to OCI services. In the on-premises Linux server, generate the keypair used for signing API requests and upload the public key to the IAM user.

CCreate a new OCI IAM user associated with a dynamic group and a policy that grants the desired permissions to OCI services. Add the on-premises Linux server in the dynamic group.

DCreate an OCI IAM policy with appropriate permissions to access the required OCI services and assign the policy to the on-premises Linux server.'

Correct : B

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

CCreate a new OCI IAM user associated with a dynamic group and a policy that grants the desired permissions to OCI services. Add the on-premises Linux server in the dynamic group.

DCreate an OCI IAM policy with appropriate permissions to access the required OCI services and assign the policy to the on-premises Linux server.'

0 / 1500

Page: 1 / 8
Total 36 questions

Unlock Full
1Z0-1104-25 Exam Features

In Just $49 You can Access

All Official Question Types
Interactive Web-Based Practice Test Software
No Installation or 3rd Party Software Required
Customize your practice sessions (Free Demo)
24/7 Customer Support

Get Full Access Now

Marked Questions
1Z0-1104-25 Exam

1Z0-1104-25 Exam Question 1
1Z0-1104-25 Exam Question 2
1Z0-1104-25 Exam Question 3
1Z0-1104-25 Exam Question 4
1Z0-1104-25 Exam Question 5

Download PDF File Demo

Try Web-Based Exam Practice Software Demo

Commenting

In order to participate in the comments you need to be logged-in.
You can sign-up or login