Oracle 1z0-1104-23 問題集

質問 1：
When using Management Agent to collect logs continuously, which is therequired configuration for OCI Logging Analytics to retrieve data from numerous logs for an instance?
A. Entity - Source Association
B. Source-Entity Association
C. Agent - Entity Association
D. Entity - Agent Association
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 2：
A http web server hosted on an Oracle cloud infrastructure compute instance in a public subnet of the vcsl virtual cloudnetwork has a stateless security ingress rule for port 80 access through internet gateway stateful network security group notification for port 80 how will the Oci vcn handle request response traffic to the compute instance for a web page from the http server with port 80?
A. Because there is no Egress ruled defined in Security List, The Response would not pass through Internet Gateway.
B. network security group would supersede the security utility list and allow both inbound and outbound traffic
C. due to the conflict in security configuration inbound request traffic would not be allowed
D. the union of both configuration would happen and allow both inbound and outbound traffic
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Which statements are CORRECT about Multi-Factor Authentication in OCI ? Select TWO correct answers
A. Members of the Administrators group cannot enable MFA for another user
B. Members of the Administrators group can disable MFA for other users
C. A user can registermultiple devices to use for MFA.
D. Users cannot enable MFA for themselves
正解：A,B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Which type of FastConnect supports configuring Oracle Cloud Infrastructure (OCI) Site-to-Site VPN for encryption? (Choose the best Answer.)
A. FastConnect Privat Peering
B. FastConnect Cross-Connect group
C. FastConnect Partner
D. FastConnect Public Peering
正解：D

質問 5：
What information do youget by using the Network Visualizer tool?
A. Organization of subnets and VLANs across availability domains
B. Routes defined between subnets and gateways
C. Interconnectivity of VCNs
D. State of subnets in a VCN
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Which cache rules criterion matches if the concatenation of the requested URL path and query are identical to the contents of the value field?
A. URL_IS
B. URL_PART_CONTAINS
C. URL_STARTS_WITH
D. URL_PART_ENDS_WITH
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Challenge 1 - Task 4 of 5
Authorize OCI Resources to Retrieve the Secret from the Vault
Scenario
You are working on a Python program running on a compute instance that needs to access an external service. To access the external service, the program needs credentials (password). Given that it is not a best security practice, you decide not to hard code the credential in the program. Instead, you store the password (secret) in a vault using the OCI Vault service. The requirement now is to authorize the compute instance so that the Python program can retrieve the password (secret) by making an API call to the OCI Vault.

Preconfigured
To complete this requirement, you are provided with:
An OCI Vault to store the secret required by the program, which is created in the root compartment as PBT_Vault_SP.
An instance principal IAM service, which enables instances to be authorized actors (principals) that can retrieve the secret from the OCI Vault.
A dynamic group named PBT_Dynamic_Group_SP with permissions to access the OCI Vault. This dynamic group includes all of the instances in your compartment.
Access to Cloud Shell.
Permissions to perform only the tasks within the challenge.
Note: You are provided with access to an OCI Tenancy, an assigned compartment, and OCI credentials. Throughout your exam, ensure to use the assigned Compartment 99234021-C01 and Region us-ashburn-1.
Complete the following tasks in the OCI environment provisioned:
Create a Linux Instance with the name [Provide Name Here] within the compartment.
Under placement, select the availability domain AD2.
Select Shape as VM.Standard2.1.
Provide your own public key to SSH the instance.
正解：
See the solution below in Explanation
Explanation:
SOLUTION:
From the navigation menu, select Compute and then click Instances.
From the left navigation pane, under List Scope, select your working compartment from the drop-down menu.
Click Create Instance. In the Create Instance dialog box, provide the following details:
Name: my_pbt_linux
Create in compartment: Select your work compartment name.
Placement: Select AD2.
Image: Oracle Linux 8
Shape: Click Change shape; then select Ampere shape series and select VM.Standard2.1.
Networking: Pick your PBT_SECRET_VCN01 and Public Subnet.
Public IP address: Assign a Public IPv4 address.
Generate SSH Keys.
Click Generate a key pair for me.
Click Save private key (This will save the private key to your local workstation).
Click create.
Note: After a couple of minutes, you can see that the instance has been successfully created and the status is Running.
After the instances are provisioned, details about it appear in the instance list. Copy and save the Public IP addresses, which will be required to connect to the instance using SSH.

質問 8：
A programmer is developing a Node.js application which will run in a Linux server on their on-premises data center. This application will access various Oracle Cloud Infrastructure (OCI) services using OCI SDKs. What is the secure way to access OCI services with OCI Identity and Access Management (IAM)? (Choose the best Answer.)
A. Create a new OCI IAM user, add the user to a group associated with a policy that grants the desired permissions to OCI services. Is the on-premises Linux server, generate the key pair Used for signing API requests and upload the public key to the IAN user.
B. Create an OCI IAM policy with appropriate permissions to access the required OCT services and assign the policy to the on-premises Linux server.
C. Create a new OCI IAM user, add the user to a group associated with a policy that grants the desired permissions to OCI services In the on-premises Linux server, add the user name and password to a file used by dj authentication.
D. Create a new OCI IAM user associated with a dynamic group and a policy that grants the desired permissions to OCI services. Add the on-premises Linux server in the dynamic group
正解：A