Oracle 1z0-1104-25 問題集

質問 1：
During your investigation of a load balancer issue, you discovered that all back-end servers associated with one of the affected listeners were reported as unhealthy. However, when you checked the back-end servers, they seemed to be working just fine.
What might be causing this issue?
A. Misconfigured health check
B. Incorrect DNS configuration
C. Misconfigured security rule
D. Incorrect subnet configuration
E. Overloaded back-end servers
正解：A

質問 2：
According to the Oracle Cloud Infrastructure (OCI) Shared Responsibility Model, which statement accurately reflects OCI's responsibility for security?
A. Customers are responsible for securing both infrastructure and data.
B. OCI has no security responsibilities; customers need to secure their resources.
C. OCI provides security only for free-tier services; customers secure everything else.
D. OCI is responsible for securing the underlying infrastructure but not customer data.
正解：D

質問 3：
A company is securing its compute instances (VMs and Bare Metal Machines) in Oracle Cloud infrastructure (OCI) using a network firewall. As shown in the diagram, traffic flows from the internet Gateway (IGW) to the firewall in the Public DMZ Subnet, and then to the compute instances in the Public Subnet.

When configuring security lists and network security groups (NSGs) in this setup, what should they consider?
A. If the policy used with the firewall has no rules specified, the firewall allows all traffic.
B. Add stateful rules to the security list attached to the firewall subnet or include the firewall in an NSG containing stateful rules for better performance.
C. Security list and NSG rules associated with the firewall subnet and VNICs are evaluated after the firewall.
D. Ensure that any security list or NSG rules allow the traffic to enter the firewall for appropriate evaluation.
正解：D

質問 4：
"Your company is building a highly available and secure web application on OCI. Because of increasing malicious web-based attacks, the security team has mandated that web servers should not be exposed directly to the Internet.
How should you architect the solution while ensuring fault tolerance and security?
A. Deploy at least three web servers in different fault domains within a private subnet. Place a public load balancer in a public subnet, but skip WAF configuration.
B. Deploy at least three web servers in different fault domains within a public subnet. Use OCI Traffic Management service for DNS-based load balancing."
C. Deploy at least three web servers in different fault domains within a public subnet, each with a public IP address. Deploy Web Application Firewall (WAF), and configure an origin for each public IP.
D. Deploy at least three web servers in different fault domains within a private subnet. Place a public load balancer in a public subnet and configure a back-end set for all web servers. Deploy Web Application Firewall (WAF) and set the load balancer public IP address as the origin.
正解：D