Online Access Free 1z0-1104-25 Exam Questions

"A company, ABC, is planning to launch a new web application on OCI. Based on past experiences, they expect a significant surge in traffic after the launch. You are responsible for ensuring that the application is highly available.
Which step would you perform to achieve this goal?

• A.Use a load balancer to distribute incoming traffic evenly across multiple instances of the web application."
• B.Use a Virtual Cloud Network (VCN) with subnets, security lists, and routing rules to isolate the web application from the Internet and other resources.
• C.Configure Cloud Guard to prevent large amounts of traffic from reaching the web application.
• D.Implement security controls, such as web application firewalls, to protect against common attack vectors.

Which are the essential components to create a rule for the Oracle Cloud Infrastructure (OCI) Events Service?

• A.Rule Conditions and Actions
• B.Install Key and Service Connector
• C.Rule Conditions and Management Agent Cloud Service
• D.Install Key and Actions

Based on the provided diagram, you have a group of critical compute instances in a private subnet that require vulnerability using the Oracle Cloud Infrastructure(OCI) Vulnerability Scanning Service (VSS).

"What additional configuration is required to enable VSS to scan instances in the private subnet

• A.Configure a service gateway in the VCN and a route rule to direct traffic for the VSS service through the gateway.
• B.Use an OCI Bastion session to establish connectivity and forward scan results from the private instances."
• C.No additional configuration is needed. VSS can access private instances by default.
• D.VSS cannot scan private instances. You need to move them to a public subnet for vulnerability scanning.

A company has deployed OCI Zero Trust Packet Routing (ZPR) to secure its network. They have two compute instances, VM1-01 and VM-02, in a public subnet. VM-01 is tagged with the security attribute app:
vm01, and VM-02 is tagged with app:vm02. The VCN is labeled with network:vcn01, The ZPR policy states:


"What is the expected outcome of this policy?

• A.Neither VM-01 nor VM-02 can SSH into each other."
• B.Both VM-01 and VM-02 can SSH into each other.
• C.VM-01 can SSH into VM-02, but VM-02 cannot SSH into VM-01.
• D.VM-02 can SSH into VM-01, but VM-01 cannot SSH into VM-02.

"You are designing a secure access strategy for compute instances deployed within a private subnet of an OCI Virtual Cloud Network (VCN). Your security policy requires that no compute instances in the private subnet should have direct Internet access, and administrative access should be controlled.
Which statement best describes the role of an OCI Bastion in securing access to these private compute instances?

• A.It provides a direct public endpoint for the compute instance, enabling remote access.
• B.It serves as a secondary authentication point, verifying user credentials before granting access to the compute instance.
• C.It creates a secure, publicly accessible entry point to access target resources in a private subnet."
• D.It acts as a firewall, blocking any external access to the private compute instance.