Pass Oracle 1z0-1104-25 Exam with Guarantee Updated 39 Questions
Latest 1z0-1104-25 Pass Guaranteed Exam Dumps Certification Sample Questions
Oracle 1z0-1104-25 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
NEW QUESTION # 13
"A business has a hybrid cloud infrastructure with Oracle Linux instances running in OCI and on-premises.
They want to reduce the amount of bandwidth used when patching systems.
Which component of OS Management Hub can help to reduce the bandwidth usage for patching?
- A. Profiles"
- B. Dynamic groups
- C. Management agents
- D. Management stations
Answer: A
NEW QUESTION # 14
Challenge 1 - Task 1
Integrate TLS Certificate Issued by the OCI Certificates Service with Load Balancer You are a cloud engineer at a tech company that is migrating its services to Oracle Cloud Infrastructure (OCI). You are required to set up secure communication for your web application using OCI's Certificate service. You need to create a Certificate Authority (CA), issue a TLS/SSL server certificate, and configure a load balancer to use this certificate to ensure encrypted traffic between clients and the backend servers.
Review the architecture diagram, which outlines the resources you'll need to address the requirement.
Preconfigured
To complete this requirement, you are provided with the following:
Access to an OCI tenancy, an assigned compartment, and OCI credentials
Required IAM policies
OCI Vault to store the secret required by the program, which is created in the root compartment as PBI_Vault_SP Task 1: Create and Configure a Virtual Cloud Network (VCN) Create a Virtual Cloud Network (VCN) namedPBT-CERT-VCN-01with the following specifications:
* VCN with a CIDR block of 10.0.0.0/16
* Subnet 1 (Compute Instance):
* Name:Compute-Subnet-PBT-CERT
* CIDR Block:10.0.1.0/24
Subnet 2 (Load Balancer):
* Name:LB-Subnet-PBT-CERT-SNET-02
* CIDR Block:10.0.2.0/24
Internet Gatewayfor external connectivity
Route table and security lists:
* Security List namedPBT-CERT-CS-SL-01for Subnet 1 (Compute-Subnet-PBT-CERT) to allow SSH (port 22) traffic
* Security List namedPBT-CERT-LB-SL-01for Subnet 2 (LB-Subnet-PBT-CERT) to allow HTTPS (port 443) traffic
"Enter the OCID of the created VCN in the text box below.
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Challenge 1: Integrate TLS Certificate Issued by the OCI Certificates Service with Load Balancer Task 1: Create and Configure a Virtual Cloud Network (VCN) Step 1: Create the Virtual Cloud Network (VCN)
* Log in to the OCI Console.
* Navigate toNetworking>Virtual Cloud Networks.
* ClickCreate Virtual Cloud Network.
* SelectVCN with Internet Connectivity(to include an Internet Gateway by default).
* Enter the following details:
* Name: PBT-CERT-VCN-01
* Compartment: Select your assigned compartment.
* VCN CIDR Block: 10.0.0.0/16
* Leave other settings as default (e.g., create a new public subnet and route table).
* ClickCreate Virtual Cloud Network. Wait for the VCN to be created.
Step 2: Create Subnet 1 (Compute-Subnet-PBT-CERT)
* In the VCN details page for PBT-CERT-VCN-01, clickSubnetsunderResources.
* ClickCreate Subnet.
* Enter the following details:
* Name: Compute-Subnet-PBT-CERT
* Subnet Type: Regional
* CIDR Block: 10.0.1.0/24
* Route Table: Select the default route table created with the VCN.
* Subnet Access: Public Subnet (to allow internet access).
* DNS Resolution: Enabled.
* ClickCreate.
Step 3: Create Subnet 2 (LB-Subnet-PBT-CERT-SNET-02)
* In the VCN details page, clickSubnetsunderResources.
* ClickCreate Subnet.
* Enter the following details:
* Name: LB-Subnet-PBT-CERT-SNET-02
* Subnet Type: Regional
* CIDR Block: 10.0.2.0/24
* Route Table: Select the default route table created with the VCN.
* Subnet Access: Public Subnet (to allow internet access for the load balancer).
* DNS Resolution: Enabled.
* ClickCreate.
Step 4: Verify Internet Gateway
* In the VCN details page, underResources, clickInternet Gateways.
* Ensure an Internet Gateway is listed and attached to PBT-CERT-VCN-01. If not created, clickCreate Internet Gateway, name it (e.g., PBT-CERT-IGW), and attach it.
Step 5: Configure Route Table
* In the VCN details page, underResources, clickRoute Tables.
* Select the default route table or create a new one named PBT-CERT-RT-01.
* ClickAdd Route Rule. 4 -Destination CIDR Block: 0.0.0.0/0
* Target Type: Internet Gateway
* Target: Select the Internet Gateway created (e.g., PBT-CERT-IGW).
* ClickAdd Route Ruleand save.
Step 6: Create Security List for Subnet 1 (Compute-Subnet-PBT-CERT)
* In the VCN details page, underResources, clickSecurity Lists.
* ClickCreate Security List.
* Enter the following:
* Name: PBT-CERT-CS-SL-01
* Compartment: Your assigned compartment.
* Add the following ingress rule:
* Source CIDR: 0.0.0.0/0 (allow from any source, adjust as per security needs)
* IP Protocol: TCP
* Source Port Range: All
* Destination Port Range: 22 (for SSH)
* Allows: Traffic
* ClickCreate.
Step 7: Create Security List for Subnet 2 (LB-Subnet-PBT-CERT-SNET-02)
* In the VCN details page, underResources, clickSecurity Lists.
* ClickCreate Security List.
* Enter the following:
* Name: PBT-CERT-LB-SL-01
* Compartment: Your assigned compartment.
* Add the following ingress rule:
* Source CIDR: 0.0.0.0/0 (allow from any source, adjust as per security needs)
* IP Protocol: TCP
* Source Port Range: All
* Destination Port Range: 443 (for HTTPS)
* Allows: Traffic
* ClickCreate.
Step 8: Retrieve and Enter VCN OCID
* Go to the VCN details page for PBT-CERT-VCN-01.
* Copy theOCIDfrom the VCN information section.
* Enter the OCID in the provided text box.
NEW QUESTION # 15
You have created a compartment TEST in your subscribed tenancy. Then, you created two groups, test1 and test2, and want the users in these groups to be able to manage all the resources in the TEST compartment.
Which policy would you use to achieve this?
- A. Allow group test1, test2 to manage all resources in compartment test.
- B. Allow any-user to manage all resources in compartment test where any {request.groups.test1, test2}
- C. Allow any-user to manage all resources in compartment test where request.group='test*'
- D. Allow group/test*/to manage all resources in compartment test.
Answer: A
NEW QUESTION # 16
"Your company is building a highly available and secure web application on OCI. Because of increasing malicious web-based attacks, the security team has mandated that web servers should not be exposed directly to the Internet.
How should you architect the solution while ensuring fault tolerance and security?
- A. Deploy at least three web servers in different fault domains within a public subnet. Use OCI Traffic Management service for DNS-based load balancing."
- B. Deploy at least three web servers in different fault domains within a private subnet. Place a public load balancer in a public subnet and configure a back-end set for all web servers. Deploy Web Application Firewall (WAF) and set the load balancer public IP address as the origin.
- C. Deploy at least three web servers in different fault domains within a private subnet. Place a public load balancer in a public subnet, but skip WAF configuration.
- D. Deploy at least three web servers in different fault domains within a public subnet, each with a public IP address. Deploy Web Application Firewall (WAF), and configure an origin for each public IP.
Answer: B
NEW QUESTION # 17
When trying to encrypt plaintext using Command Line Interface (CLI), the developer gets a Service Error.
This is the command the developer tried to run:
What is the reason for this error?
- A. The plaintext needs to be in JSON form.
- B. The user should pass the key version OCID instead of the key OCID.
- C. The developer forgot to specify the region.
- D. The developer has the wrong endpoint.
Answer: B
NEW QUESTION # 18
During your investigation of a load balancer issue, you discovered that all back-end servers associated with one of the affected listeners were reported as unhealthy. However, when you checked the back-end servers, they seemed to be working just fine.
What might be causing this issue?
- A. Incorrect DNS configuration
- B. Overloaded back-end servers
- C. Misconfigured health check
- D. Incorrect subnet configuration
- E. Misconfigured security rule
Answer: C
NEW QUESTION # 19
Task 7: Verify the OCI Certificate with Load Balancer
Verify HTTPS connection to the load balancer by running the following command in Cloud Shell curl -k https://<Public IP of PBT-CERT-LB-01> Enter the following URL in the web browser:
https://<Public IP of PBT-CERT-LB-01>
If prompted with a certificate error, accept the risk and continue.
Verify web page content by ensuring the text, "You are visiting Web Server 1" from the index.html file is displayed in the browser See the solution below in Explanation.
Answer:
Explanation:
Task 7: Verify the OCI Certificate with Load Balancer
Step 1: Obtain the Public IP of the Load Balancer
* Log in to the OCI Console.
* Navigate toNetworking>Load Balancers.
* Click on PBT-CERT-LB-01.
* Note thePublic IP Addressfrom the load balancer details page.
Step 2: Verify HTTPS Connection Using Cloud Shell
* Open the OCI Cloud Shell from the top-right corner of the OCI Console.
* Run the following command, replacing <Public IP of PBT-CERT-LB-01> with the public IP you noted:
curl -k https://<Public IP of PBT-CERT-LB-01>
* Expected output: You should see the text "You are visiting Web Server 1" if the connection is successful. The -k flag ignores certificate validation errors (common during initial testing with self- signed or newly issued certificates).
* If you encounter an error, ensure the load balancer is active, the listener is configured correctly, and the backend server (PBT-CERT-VM-01) is reachable.
Step 3: Verify in a Web Browser
* Open a web browser.
* Enter the following URL, replacing <Public IP of PBT-CERT-LB-01> with the public IP you noted:
https://<Public IP of PBT-CERT-LB-01>
* If prompted with a certificate warning (e.g., due to a self-signed certificate or untrusted CA), accept the risk and proceed (click "Advanced" and "Proceed" or similar, depending on your browser).
* Verify that the web page displays the text "You are visiting Web Server 1" from the index.html file created on PBT-CERT-VM-01.
Step 4: Troubleshoot (if needed)
* If the text is not displayed:
* Check the load balancer health status underBackend Sets>Healthin the OCI Console.
* Ensure the security list PBT-CERT-LB-SL-01 allows port 443 and the compute instance security list allows port 80.
* Verify the Apache service is running on PBT-CERT-VM-01 by SSHing in and running sudo systemctl status httpd.
NEW QUESTION # 20
Based on the provided diagram, you have a group of critical compute instances in a private subnet that require vulnerability using the Oracle Cloud Infrastructure(OCI) Vulnerability Scanning Service (VSS).
"What additional configuration is required to enable VSS to scan instances in the private subnet
- A. Use an OCI Bastion session to establish connectivity and forward scan results from the private instances."
- B. Configure a service gateway in the VCN and a route rule to direct traffic for the VSS service through the gateway.
- C. VSS cannot scan private instances. You need to move them to a public subnet for vulnerability scanning.
- D. No additional configuration is needed. VSS can access private instances by default.
Answer: B
NEW QUESTION # 21
"Your company is in the process of migrating its sensitive data to Oracle Cloud Infrastructure (OCI) and is prioritizing the strongest possible security measures. Encryption is a key part of this strategy, but you are particularly concerned about the physical security of the hardware where your encryption keys will be stored.
Which characteristic of OCI Key Management Service (KMS) helps ensure the physical security of your encryption keys?
- A. Granular customer control over key access permissions
- B. Utilization of FIPS 140-2 validated Hardware Security Modules (HSMs)"
- C. Centralized key management for simplified administration
- D. Seamless integration with other OCI services for streamlined workflows
Answer: B
NEW QUESTION # 22
Task 6: Create Load Balancer and Attach Certificate
Create a Load Balancer with the name PBT-CERT-LB-01 in subnet LB-Subnet-PBT-CERT-SNET-02 Create a Listener for the load balancer, where:
Name: PBT-CERT-LB_LTSN_01
Protocol: HTTPS
Port: 443
Attach the certificate PBT-CERT-01-<username> to the load balancer
Attach the security list PBT-CERT-LB-SL-01 to subnet LB-Subnet-PBT-CERT-SNET-02 See the solution below in Explanation.
Answer:
Explanation:
Task 6: Create Load Balancer and Attach Certificate
Step 1: Create the Load Balancer
* Log in to the OCI Console.
* Navigate toNetworking>Load Balancers.
* ClickCreate Load Balancer.
* Enter the following details:
* Name: PBT-CERT-LB-01
* Compartment: Select your assigned compartment.
* Load Balancer Type: SelectPublic.
* Virtual Cloud Network: Select PBT-CERT-VCN-01.
* Subnet: Select LB-Subnet-PBT-CERT-SNET-02.
* Shape: Choose a shape (e.g., 10 Mbps, adjust based on needs).
* ClickNext.
* Leave backend sets and listeners as default for now (we'll configure the listener next).
* ClickCreate Load Balancerand wait for it to be provisioned.
Step 2: Create a Listener
* Once the load balancer is created, go to theLoad Balancerspage and click on PBT-CERT-LB-01.
* UnderResources, clickListeners.
* ClickCreate Listener.
* Enter the following details:
* Name: PBT-CERT-LB_LTSN_01
* Protocol: SelectHTTPS.
* Port: Enter 443.
* Certificate: ClickAdd Certificate, then select the PBT-CERT-01<username> certificate (e.g., PBT-CERT-0199008677labuser01) created in Task 5.
* Leave other settings (e.g., SSL handling) as default unless specified.
* ClickCreate.
Step 3: Configure the Backend Set
* In the PBT-CERT-LB-01 details page, underResources, clickBackend Sets.
* ClickCreate Backend Set(if not already created).
* Enter basic details (e.g., name like PBT-CERT-BS-01).
* Add a backend server:
* IP Address: Use the private IP of PBT-CERT-VM-01 (find this in the instance details under Compute>Instances).
* Port: 80 (HTTP, as configured on the web server).
* Protocol: HTTP.
* ClickCreate.
Step 4: Attach the Security List to the Subnet
* Navigate toNetworking>Virtual Cloud Networks.
* Select PBT-CERT-VCN-01 and clickSubnets.
* Click on LB-Subnet-PBT-CERT-SNET-02.
* UnderSecurity Lists, ensure PBT-CERT-LB-SL-01 is attached. If not:
* ClickEdit.
* Remove the default security list and add PBT-CERT-LB-SL-01.
* ClickSave Changes.
Step 5: Verify the Configuration
* Ensure the load balancer health status is OK (check underBackend Sets>Health).
* Test by accessing https://<load-balancer-public-ip> in a browser (replace with the public IP from the load balancer details).
NEW QUESTION # 23
Task 4: Create a Certificate Authority (CA)
Create a certificate authority, where:
CA name: PBT-CERT-CA-01-<username>
For example, if your username is 99008677-lab.user01, then the certificate authority name should be PBT- CERT-CA-01990086771abuser01 Ensure you eliminate special characters from the user name.
Common name: PBT-CERT-OCICA-01
Master Encryption Key: PBT-CERT-MEK-01 (created in the previous task)
Answer:
Explanation:
See the solution below in Explanation.
Task 4: Create a Certificate Authority (CA)
Step 1: Access the OCI Vault
* Log in to the OCI Console.
* Navigate toIdentity & Security>Vault.
* Select the root compartment.
* Locate and click on the vault named PBI_Vault_SP.
Step 2: Create the Certificate Authority
* In the PBI_Vault_SP vault details page, underResources, clickCertificate Authorities.
* ClickCreate Certificate Authority.
* Enter the following details:
* Name: Replace <username> with your username (e.g., if your username is 99008677-lab.user01, remove special characters like - and . to get 99008677labuser01, then use PBT-CERT-CA-
0199008677labuser01).
* Common Name: Enter PBT-CERT-OCICA-01.
* Master Encryption Key: Select the PBT-CERT-MEK-01<username> key created in Task 3 (e.
g., PBT-CERT-MEK-0199008677labuser01).
* Subject: Leave as default or adjust (e.g., Organization, Country) if required by your setup.
* Validity Period: Set as needed (e.g., 10 years), or use the default.
* Compartment: Ensure it's set to the root compartment.
* ClickCreate Certificate Authorityand wait for the CA to be provisioned.
Step 3: Verify the Certificate Authority
* After creation, go to theCertificate Authoritiessection under PBI_Vault_SP.
* Confirm the CA PBT-CERT-CA-01<username> (e.g., PBT-CERT-CA-0199008677labuser01) is listed and its status is active.
NEW QUESTION # 24
You are a security architect at your organization and have noticed an increase in cyberattacks on your applications, including Cross-Site Scripting (XSS) and SQL Injection. To mitigate these threats, you decide to use OCI Web Application Firewall (WAF).
Which type of OCI WAF rule should you configure to protect against these attacks?
- A. Rate Limiting rule
- B. Encryption rule
- C. Access control rule
- D. Protection rule
Answer: D
NEW QUESTION # 25
An E-commerce company running on Oracle Cloud Infrastructure (OCI) wants to prevent accidental misconfigurations that could expose sensitive data. They need an OCI service that can enforce predefined security rules when creating or modifying cloud resources.
Which OCI service should they use?
- A. OCI Certificates
- B. OCI Security Zone
- C. OCI Identity and Access Management (IAM)
- D. OCI Web Application Firewall (WAF)
Answer: B
NEW QUESTION # 26
Which are the essential components to create a rule for the Oracle Cloud Infrastructure (OCI) Events Service?
- A. Install Key and Service Connector
- B. Rule Conditions and Actions
- C. Install Key and Actions
- D. Rule Conditions and Management Agent Cloud Service
Answer: B
NEW QUESTION # 27
An OCI administrator notices that a compute instance running in the production compartment is unable to create Object Storage buckets using the OCI CLI command:
oci os bucket create --name mybucket --compartment-id <compartment_OCID> --auth instance_principal The error message returned states:
"NotAuthorizedOrNotFound: You are not authorized to perform this action." The administrator verifies that the instance has Internet access and can reach OCI endpoints.
What then could be causing the issue?
- A. The instance is using the wrong OCI CLI authentication method.
- B. The bucket name is already in use, causing a conflict.
- C. The policy is written at the root compartment instead of the production compartment.
- D. The instance is not part of any Dynamic Group or the matching rule is incorrect.
Answer: D
NEW QUESTION # 28
......
New 1z0-1104-25 Test Materials & Valid 1z0-1104-25 Test Engine: https://www.exam4tests.com/1z0-1104-25-valid-braindumps.html
1z0-1104-25 Updated Exam Dumps [2026] Practice Valid Exam Dumps Question: https://drive.google.com/open?id=1R1uIhcmne1f3Nyd5x5_uIV9dXoY_TpT8