1z0-1104-21問題集、Oracle実際の試験問題

質問 1

A http web server hosted on an Oracle cloud infrastructure compute instance in a public subnet of the vcsl virtual cloud network has a stateless security ingress rule for port 80 access through internet gateway stateful network security group notification for port 80 how will the Oci vcn handle request response traffic to the compute instance for a web page from the http server with port 80?

A. Because there is no Egress ruled defined in Security List, The Response would not pass through Internet Gateway.

B. due to the conflict in security configuration inbound request traffic would not be allowed

C. the union of both configuration would happen and allow both inbound and outbound traffic

D. network security group would supersede the security utility list and allow both inbound and outbound traffic

正解: A

質問 2

Which components are a part of the OCI Identity and Access Management service?

A. Regional subnets

B. Policies

C. Compute instances

D. VCN

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 3

On which option do you set Oracle Cloud Infrastructure Budget?

A. Instances

B. Tenancy

C. Compartments

D. Free-form tags

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 4

Which statement is true about standards?

A. They are result of a regulation or contractual requirement or an industry requirement.

B. They are methods and instructions on how to maintain or accomplish the directives of the policy.

C. They are the foundation of corporate governance.

D. They may be audited.

正解: A

質問 5

Which resources can be used to create and manage from Vault Service ? Select TWO correct answers

A. Secret

B. Keys

C. IAM

D. Cloud Guard

正解: A,B

解説: (PassTest メンバーにのみ表示されます)

質問 6

Where is sensitive configuration data (like certificates, and credentials) is stored by Kubernetes cluster control plane?

A. Boot Volume

B. Block Volume

C. Oracle Functions

D. ETCD

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 7

As a security administrator, you found out that there are users outside your co network who are accessing OCI Object Storage Bucket. How can you prevent these users from accessing OCI resources in corporate network?

A. Create PAR to restrict access the access

B. Make OCI resources private instead of public

C. Create an 1AM policy and add a network source

D. Create an 1AM policy and create WAF rules

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 8

Which statement is true about using custom BYOI instances in Windows Servers that are managed by OS Management Service?

A. Windows Servers that already has the minimum agent version requires an agent update or installation.

B. Windows Servers that already has the minimum agent version does not require an agent update or installation.

C. Windows Servers that does not have the minimum agent version does not require an agent update or installation.

D. Windows Servers that does not have the minimum agent version requires an agent update or installation.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 9

which three resources are required to encrypt a block volume with the customer managed key?

A. IAM Policy Allowing Block Storage to Use Keys

B. BLOCK KEY

C. MAXIMUM SECURITY ZONE

D. OCI VAIRT

E. SYMMETRIC MASTER KEY ENCRYPTlON KEY

F. Secrets

正解: A,D,F

解説: (PassTest メンバーにのみ表示されます)

質問 10

What would you use to make Oracle Cloud Infrastructure Identity and Access Management govern resources in a tenancy?

A. Groups

B. Users

C. Policies

D. Dynamic groups

正解: C

解説: (PassTest メンバーにのみ表示されます)

Oracle Cloud Infrastructure Security 2021 Associate - 1z0-1104-21 模擬練習