Free Oracle 1z0-1104-25 Exam Dumps Questions & Answers

A company has deployed OCI Zero Trust Packet Routing (ZPR) to secure its network. They have two compute instances, VM1-01 and VM-02, in a public subnet. VM-01 is tagged with the security attribute app:
vm01, and VM-02 is tagged with app:vm02. The VCN is labeled with network:vcn01, The ZPR policy states:


"What is the expected outcome of this policy?

• A.VM-01 can SSH into VM-02, but VM-02 cannot SSH into VM-01.
• B.VM-02 can SSH into VM-01, but VM-01 cannot SSH into VM-02.
• C.Neither VM-01 nor VM-02 can SSH into each other."
• D.Both VM-01 and VM-02 can SSH into each other.

In Oracle Cloud Infrastructure (OCI), bare metal instances provide customers with direct access to the underlying hardware. To mitigate security risks when a customer terminates a bare metal instance, OCI utilizes Root-of-Trust hardware.
What is the primary function of the Root-of-Trust hardware in this context?

• A.It automatically encrypts data at rest on the bare metal instance.
• B.It guarantees complete isolation between customer workloads on different instances.
• C.It eliminates the need for hypervisors, reducing the potential attack surface.
• D.It ensures all non-volatile memory on the terminated instance is securely wiped before reuse.

A company is securing its compute instances (VMs and Bare Metal Machines) in Oracle Cloud infrastructure (OCI) using a network firewall. As shown in the diagram, traffic flows from the internet Gateway (IGW) to the firewall in the Public DMZ Subnet, and then to the compute instances in the Public Subnet.

When configuring security lists and network security groups (NSGs) in this setup, what should they consider?

• A.If the policy used with the firewall has no rules specified, the firewall allows all traffic.
• B.Add stateful rules to the security list attached to the firewall subnet or include the firewall in an NSG containing stateful rules for better performance.
• C.Security list and NSG rules associated with the firewall subnet and VNICs are evaluated after the firewall.
• D.Ensure that any security list or NSG rules allow the traffic to enter the firewall for appropriate evaluation.

According to the Oracle Cloud Infrastructure (OCI) Shared Responsibility Model, which statement accurately reflects OCI's responsibility for security?

• A.Customers are responsible for securing both infrastructure and data.
• B.OCI provides security only for free-tier services; customers secure everything else.
• C.OCI has no security responsibilities; customers need to secure their resources.
• D.OCI is responsible for securing the underlying infrastructure but not customer data.

Task 4: Create a Certificate Authority (CA)
Create a certificate authority, where:
CA name: PBT-CERT-CA-01-<username>
For example, if your username is 99008677-lab.user01, then the certificate authority name should be PBT- CERT-CA-01990086771abuser01 Ensure you eliminate special characters from the user name.
Common name: PBT-CERT-OCICA-01
Master Encryption Key: PBT-CERT-MEK-01 (created in the previous task)