Question 1

You want to include all instances in any of two or morecompartments, which syntax should you use for

dynamic policy you want to create for "Prod" compartment and "SIT" compartment?

Prod OCID : ‘JON.Prod’

SIT OCID : 'JON.SIT’

Options :

A : Any { instance in compartment ‘Prod’ and Compartment 'SIT' }

B : Any { instance.compartment.id = 'JON.Prod’, instance.compartment.id = 'JON.SIT'

C : All { instance.compartment.id = 'JON.Prod’, instance.compartment.id = 'JON.SIT'

D : All { instance in compartment 'Prod' and Compartment 'SIT' }

Answer: B

Question 2

As a security architect, how can you preventunwanted bots while desirable bots are allowed to enter?

Options :

A : Data Guard

B : Vault

C : Compartments

D : Web Application Firewall (WAF)

Answer: D

Question 3

Which IAM policy should be created to give XYZ the ability to list contents of a resource excluding the f needs to authenticate in prod compartment ? Principle of least priviledge should be used.

Options :

A : Allow group XYZ to manage all resources in compartment != prod

B : Allow group XYZ to use all resources in compartment != prod

C : Allow group XYZ to inspect all resources in tenancy where target.compartment.name != prod

D : Allow group XYZ to read all resources in tenancy where target.compartment.name != prod

Answer: C

Question 4

You want to create a stateless rule for SSH in a security list, and the Ingress rule has al-ready been properly configured. Which combination should you use on the egress rule? (Choose the best Answer.)

Options :

A : Select TCP for Protocol; enter 22 for Source Port; and ALL for Destination Port.

B : Select UDP for Protocol; enter 22 for Source Part; and ALL for Destination Port.

C : Select TCP for Protocol enter ALL for Source Port; and 22 for Destination Port.

D : Select TCP for Protocol; enter 22 for Source Port; and 22 for Destination Port.

Answer: A

Question 5

As a security administrator, you want to create cloud resources that align with Oracle's security principles and best practices. Which security service should you use?

Options :

A : Identity and Access Management

B : Cloud Guard

C : Security Advisor

D : Web Application Firewall (WAF)

Answer: C

Higher Test Marks with Free Online 1Z0-1104-25 Exam Practice

Buying Options: