Online Access Free 1z0-1104-22 Exam Questions

Which statement is true about Oracle Cloud Infrastructure (OCI) Object Storage server-side encryption?

• A.All the traffic to and from object storage is encrypted by using Transport Layer Security.
• B.Encryption is not enabled by default.
• C.Each object in a bucket is always encrypted with the same data encryption key.
• D.Customer-provided encryption keys are never stored in OCI Vault service.

As a security architect, how can you prevent unwanted bots while desirable bots are allowed to enter?

• A.Web Application Firewall (WAF)
• B.Compartments
• C.Data Guard
• D.Vault

Which Oracle Cloud Service provides restricted access to target resources?

• A.Internet Gateway
• B.Bastion
• C.SSL certificate
• D.Load balancer

A number of malicious requests for a web application is coming from a set of IP addresses originating from Antartica.
Which of the following statement will help to reduce these types of unauthorized requests ?

• A.List specific set of IP addresses then deny rules in Virtual Cloud Network Security Lists
• B.Change your home region in which your resources are currently deployed
• C.Use WAF policy using Access Control Rules
• D.Delete NAT Gateway from Virtual Cloud Network

As a security administrator, you want to create cloud resources that align with Oracle's security principles and best practices. Which security service should you use?

• A.Web Application Firewall (WAF)
• B.Cloud Guard
• C.Identity and Access Management
• D.Security Advisor