[Jan 21, 2024] Test4Cram 1z0-1104-23 dumps & Oracle Cloud sure practice dumps [Q69-Q86]

QUESTION 69
Which three Oracle Cloud Infrastructure (OCI) services are covered by Cloud Guard? (Choose three.)

Oracle Integration Osud (OIC)

Blockchain

Object Storage

Database Cloud Service

Identity and Access Management (IAM)

QUESTION 70
Which tasks can you perform on a dedicated virtual machine host?

Manual scaling

Creating instance pools

Instance configurations

Capacity reservations

QUESTION 71
Challenge 3 – Task 4 of 4
Set Up a Bastion Host to Access the Compute Instance in a Private Subnet Scenario A compute instance is provisioned in a private subnet that is not accessible through the Internet. To access the compute instance resource in a private subnet, you must provide a time-bound SSH session without deploying and maintaining a public subnet and a jump server, which eliminates the hassle and potential attack surface from remote access.
To complete this deployment, you have to perform the following tasks in the environment provisioned for you:
* Configure a Virtual Cloud Network (VCN) and a Private Subnet.
* Provision a Compute Instance in the private subnet and enable Bastion Plugin.
* Create a Bastion and Bastion session.
* Connect to a compute instance using Managed SSH session.

Note: You are provided with access to an OCI Tenancy, an assigned compartment, and OCI credentials. Throughout your exam, ensure to use the assigned Compartment 99233424-C01 and Region us-ashburn-1 Complete the following tasks in the provisioned OCI environment:
Connect to a compute instance using a Managed SSH Bastion session from your local machine terminal or Cloud shell.

See the solution below in Explanation
Explanation:
Solutions:
From the navigation menu, select Identity & Security and then click Bastion.
In the left navigation pane, select your working compartment under List Scope from the drop-down menu.
Click the SPPBTBASTION992831403labuser13 bastion.
Click the three dots next to the PBT-1-Session-01 managed SSH session to open the Actions menu and click the View SSH command.
Click Copy next to the SSH command and Close. (Copy the SSH command to a Notepad file) Use a Notepad text editor to replace <privateKey> with the private key of the SSH key pair that you provided when you created the session.
a. For example:
perl
ssh -i ssh-key-2023-08-02.key -o ProxyCommand=”ssh -i ssh-key-2023-08-02.key -w %h:%p -p 22 ocid1.bastionsession.oc1.iad.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx@host.bastion.us-ashburn-1.oci.oraclecloud.com” -p 22 [email protected] Click the Cloud Shell icon at the right of the OCI console header.
Verify that you are in the home directory. a. cd ~
Upload the private key to the cloud shell you downloaded to your workstation earlier. Reference to upload file to cloud shell.
The file will be named similarly to ssh-key-<date>.key.
Locate and change the permission of the private key by executing the following commands: a. ls b. chmod 400 <private key file> Run the SSH command to connect the compute instance in the private subnet. a. For example:
perl
ssh -i ssh-key-2023-08-02.key -o ProxyCommand=”ssh -i ssh-key-2023-08-02.key -w %h:%p -p 22 ocid1.bastionsession.oc1.iad.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx@host.bastion.us-ashburn-1.oci.oraclecloud.com” -p 22 [email protected] Note: Enter yes in response to “Are you sure you want to continue connecting (yes/no)?” 13. Verify the connected instance’s Private IP address. a. ifconfig Take note of the inet/IP address for the ens3 interface in the output and compare it to the instance Private IP address created in this lab, i.e. PBT-BAS-VM-01.
Congratulations! You have successfully created an instance, enabled Bastion, and created a Bastion and session to connect the resources to a private endpoint.

QUESTION 72
Which is NOT a compliance document?

Certificate

Penetration test report

Attestation

Bridge letter

QUESTION 73
Which are the three prerequisites for successfully configuring a Bastion managed SSH ses-sion to a compute instance in a private subnet? (Choose three.)

The compute instance must have the Bastion cloud agent enabled.

The private subnet must have a service or NAT gateway.

The private subret must not have any gateway in it

The SSH port forwarding feature needs to be enabled

The compute instance must have the Bastion cloud agent disabled

The route table associated with the subnet needs to have a route rule to a service or NAT gateway.

QUESTION 74
Operations team has made a mistake in updating the secret contents and immediately need to resume usingolder secret contents in OCI Secret Management within a Vault.
As a Security Administrator, what step should you perform to rollback to last version? Select TWO correct answers.

Mark the secret version as ‘deprecated’

Mark the secret version as’Previous’

Mark the secret version as ‘Rewind’

Upload new secret and mark as ‘Pending’. Promote this secret version as ‘Current’

QUESTION 75
Which Cloud Guard component identifies issues with resources or user actions and alerts you when an issue is found?

Problems

Targets

Detectors

Responders

QUESTION 76
Which statement is true about using custom BYOI instances in Windows Servers that are managed by OS Management Service?

Windows Servers that does not have the minimum agent version does not require an agent update or installation.

Windows Servers that already has the minimum agent version does not require an agent update or installation.

Windows Servers that already has the minimum agent version requires an agent update or installation.

Windows Servers that does not have the minimum agent version requires an agent update or installation.

QUESTION 77
What is the use case for Oracle Cloud Infrastructure (OCI) Logging Analytics service? (Choose the best Answer.)

Correlate, visualize, and monitor all log data.

Label data packets that pass through the Internet gateway

Automate and manage any logs based on a subscription model

Create instances automatically to collect logs, analyze, and send reports

QUESTION 78
As a cloud network administrator, you have been tasked with defining ingress and egress access rules for microservices deployed as functions in Oracle Functions. In addition to defining some general access rules in the subnet’s security list, you define more fine-grained rules for different functions using Oracle Cloud Infrastructure (OCI) Network Security Groups (NSGs). Once the NSGs are created, where should they be attached in order to apply to a specific deployed function? (Choose the best Answer.)

The function itself

The function’s docker container

The application hosting the function

The pod hosting the application

QUESTION 79
As a security administrator, you want to create cloud resources that alignwith Oracle’s security principles and best practices. Which security service should you use?

Identity and Access Management

Cloud Guard

Security Advisor

Web Application Firewall (WAF)

QUESTION 80
Which of the following is necessary step when creating a secret in vault?

Vault-managed key is necessary to encrypt the secret

Digest Hash shouldbe created of the secret value

Object Storage must be created to run secret service

Shamir’s secret sharing algorithm should be used to unseal the vault

QUESTION 81
A member of operations team has set Pre-Authenticated Request (PAR) associated with a bucket to an incorrect date and now wants to edit the PARrequest. How can this be achieved?

Don’t set an expiration time for PAR

Delete the bucket associated with PAR and recreate it

Delete the PAR and recreate it with the required date

Delete both PAR as well as the bucket then recreate both

QUESTION 82
Which Oracle Cloud Service provides restricted accessto target resources?

Bastion

Internet Gateway

Load balancer

SSL certificate

QUESTION 83
Which two are monitored by Cloud Guard in OCI, which can help with the overall security posture? (Choose two.)

prevents you from creating misconfigurations on your resources in OCI

monitors user activity that can be unauthorized or suspicious

helps detects misconfigured resources, such as publicly accessible storage buckets, in-stances, and restricted ports on security lists

masks sensitive data and monitors security controls on your Databases

QUESTION 84
How can you increase the expiration of a pre-authenticated request (PAR) associated with a bucket? (Choose the best Answer.)

You cannot edit a pre-authenticated request. Delete the pre-authenticated request and recreate with the desired expiration

Edit the bucket metadata and change the expiration date.

Find the Identity and Access Management (IAM) policy associated with the PAR. De-fine the desired expiration in the policy

Edit the pre-authenticated request and define the desired expiration

QUESTION 85
You have configured the Management Agent on an Oracle Cloud Infrastructure (OCI) Linux instance for log ingestion purposes.
Which is a required configuration for OCI Logging Analytics service to collect data from multiple logs of this Instance?

Log – Log Group Association

Entity – Log Association

Source – Entity Association

Log Group – Source Association

QUESTION 86
With regard to OCI Audit Log Service, which of the statement is INCORRECT?

Retention period for audit events cannot be modified

REST API calls can be recorded by Audit service

Audit Events gets collected when modification within objects stored inan Object Storage bucket

Events logged by the Audit service can be viewed by using the Console, API, or the SDK for Java