Free Oracle 1Z0-1104-26 Exam Questions

Become Oracle Certified with updated 1Z0-1104-26 exam questions and correct answers

Page: 1 / 8

Total 36 Questions | Updated On: Sep 17, 2026

Add To Cart

Question 1

A company has deployed OCI Zero Trust Packet Routing (ZPR) to secure its network. They have two compute instances, VM1-01 and VM-02, in a public subnet. VM-01 is tagged with the security attribute app: vm01, and VM-02 is tagged with app:vm02. The VCN is labeled with network:vcn01, The ZPR policy states:"What is the expected outcome of this policy?

A : VM-02 can SSH into VM-01, but VM-01 cannot SSH into VM-02.

B : VM-01 can SSH into VM-02, but VM-02 cannot SSH into VM-01.

C : Both VM-01 and VM-02 can SSH into each other.

D : Neither VM-01 nor VM-02 can SSH into each other."

Answer: B

Question 2

An E-commerce company running on Oracle Cloud Infrastructure (OCI) wants to prevent accidental misconfigurations that could expose sensitive data. They need an OCI service that can enforce predefined security rules when creating or modifying cloud resources. Which OCI service should they use?

A : OCI Web Application Firewall (WAF)

B : OCI Identity and Access Management (IAM)

C : OCI Security Zone

D : OCI Certificates

Answer: C

Question 3

"Your company is in the process of migrating its sensitive data to Oracle Cloud Infrastructure (OCI) and is prioritizing the strongest possible security measures. Encryption is a key part of this strategy, but you are particularly concerned about the physical security of the hardware where your encryption keys will be stored. Which characteristic of OCI Key Management Service (KMS) helps ensure the physical security of your encryption keys?

A : Granular customer control over key access permissions

B : Centralized key management for simplified administration

C : Seamless integration with other OCI services for streamlined workflows

D : Utilization of FIPS 140-2 validated Hardware Security Modules (HSMs)"

Answer: D

Question 4

You have created a compartment TEST in your subscribed tenancy. Then, you created two groups, test1 and test2, and want the users in these groups to be able to manage all the resources in the TEST compartment. Which policy would you use to achieve this?

A : Allow group/test*/to manage all resources in compartment test.

B : Allow group test1, test2 to manage all resources in compartment test.

C : Allow any-user to manage all resources in compartment test where any {request.groups.test1, test2}

D : Allow any-user to manage all resources in compartment test where request.group='test*'

Answer: B

Question 5

An OCI administrator notices that a compute instance running in the production compartment is unable to create Object Storage buckets using the OCI CLI command:The error message returned states:"NotAuthorizedOrNotFound: You are not authorized to perform this action."The administrator verifies that the instance has Internet access and can reach OCI endpoints.What then could be causing the issue?

A : The instance is using the wrong OCI CLI authentication method.

B : The bucket name is already in use, causing a conflict.

C : The policy is written at the root compartment instead of the production compartment.

D : The instance is not part of any Dynamic Group or the matching rule is incorrect.

Answer: D

Page: 1 / 8

Total 36 Questions | Updated On: Sep 17, 2026

Add To Cart