Oracle 1z0-1104-23 問題集

質問 1：
Which of the following services are NOT Security Services in OCI ? Select TWO answers.
A. Vault
B. Cloud Guard
C. Data Guard
D. Block Volume
正解：C,D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Which Oracle Cloud Service provides restricted accessto target resources?
A. SSL certificate
B. Internet Gateway
C. Bastion
D. Load balancer
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
What information do youget by using the Network Visualizer tool?
A. Organization of subnets and VLANs across availability domains
B. Routes defined between subnets and gateways
C. Interconnectivity of VCNs
D. State of subnets in a VCN
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Your web application is protected by the Web Application Firewall (WAF) service in Oracle Cloud Infrastructure (OCT). You want to block traffic originating from a country where your company is not allowed to do business. Where would you create a WAF rule to block traffic from a specific country? (Choose the best Answer.)
A. Access Control Rules
B. Origin Management
C. Bet Management
D. Protection Rules
E. Cache Rules
正解：A

質問 5：
As a security architect, how can you preventunwanted bots while desirable bots are allowed to enter?
A. Web Application Firewall (WAF)
B. Vault
C. Compartments
D. Data Guard
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Challenge 3 - Task 4 of 4
Set Up a Bastion Host to Access the Compute Instance in a Private Subnet Scenario A compute instance is provisioned in a private subnet that is not accessible through the Internet. To access the compute instance resource in a private subnet, you must provide a time-bound SSH session without deploying and maintaining a public subnet and a jump server, which eliminates the hassle and potential attack surface from remote access.
To complete this deployment, you have to perform the following tasks in the environment provisioned for you:
* Configure a Virtual Cloud Network (VCN) and a Private Subnet.
* Provision a Compute Instance in the private subnet and enable Bastion Plugin.
* Create a Bastion and Bastion session.
* Connect to a compute instance using Managed SSH session.

Note: You are provided with access to an OCI Tenancy, an assigned compartment, and OCI credentials. Throughout your exam, ensure to use the assigned Compartment 99233424-C01 and Region us-ashburn-1 Complete the following tasks in the provisioned OCI environment:
Connect to a compute instance using a Managed SSH Bastion session from your local machine terminal or Cloud shell.
正解：
See the solution below in Explanation
Explanation:
Solutions:
From the navigation menu, select Identity & Security and then click Bastion.
In the left navigation pane, select your working compartment under List Scope from the drop-down menu.
Click the SPPBTBASTION992831403labuser13 bastion.
Click the three dots next to the PBT-1-Session-01 managed SSH session to open the Actions menu and click the View SSH command.
Click Copy next to the SSH command and Close. (Copy the SSH command to a Notepad file) Use a Notepad text editor to replace <privateKey> with the private key of the SSH key pair that you provided when you created the session.
a. For example:
perl
ssh -i ssh-key-2023-08-02.key -o ProxyCommand="ssh -i ssh-key-2023-08-02.key -w %h:%p -p 22 ocid1.bastionsession.oc1.iad.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx@host.bastion.us-ashburn-1.oci.oraclecloud.com" -p 22 [email protected] Click the Cloud Shell icon at the right of the OCI console header.
Verify that you are in the home directory. a. cd ~
Upload the private key to the cloud shell you downloaded to your workstation earlier. Reference to upload file to cloud shell.
The file will be named similarly to ssh-key-<date>.key.
Locate and change the permission of the private key by executing the following commands: a. ls b. chmod 400 <private key file> Run the SSH command to connect the compute instance in the private subnet. a. For example:
perl
ssh -i ssh-key-2023-08-02.key -o ProxyCommand="ssh -i ssh-key-2023-08-02.key -w %h:%p -p 22 ocid1.bastionsession.oc1.iad.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx@host.bastion.us-ashburn-1.oci.oraclecloud.com" -p 22 [email protected] Note: Enter yes in response to "Are you sure you want to continue connecting (yes/no)?" 13. Verify the connected instance's Private IP address. a. ifconfig Take note of the inet/IP address for the ens3 interface in the output and compare it to the instance Private IP address created in this lab, i.e. PBT-BAS-VM-01.
Congratulations! You have successfully created an instance, enabled Bastion, and created a Bastion and session to connect the resources to a private endpoint.

質問 7：
What is a prerequisite for creating a secret in OCI Vault? (Choose the best Answer.)
A. The user must create a compute instance to run the Secret service.
B. You must unseal the Vault by using Shamir's Secret Sharing.
C. You must create a digest hash of the secret value.
D. You must have an Vault-managed key to encrypt the secret.
正解：D

質問 8：
With regard to vulnerability and cloud penetration testing, which rules of engagement apply? Select TWO correct answers.
A. You are responsible for any damages to Oracle Cloud customers that are caused by your testing activities
B. Any port scanning must be performed in an aggressive mode
C. Testing should target any other subscription or any other Oracle Cloud customer resources
D. Physical penetration and vulnerability testing of Oraclefacilities is prohibited
正解：A,D
解説: (Topexam メンバーにのみ表示されます)