Free Oracle 1Z0-1104-26 Exam Questions

Become Oracle Certified with updated 1Z0-1104-26 exam questions and correct answers

Page: 1 / 8

Total 36 Questions | Updated On: Oct 25, 2026

Add To Cart

Question 1

When trying to encrypt plaintext using Command Line Interface (CLI), the developer gets a Service Error. This is the command the developer tried to run: What is the reason for this error?

A : The developer forgot to specify the region.

B : The user should pass the key version OCID instead of the key OCID.

C : The developer has the wrong endpoint.

D : The plaintext needs to be in JSON form.

Answer: B

Question 2

Within OCI IAM identity domains, the AD Bridge component serves a critical role. How does the AD Bridge functionality specifically enhance Identity and Access Management (IAM) practices?

A : It simplifies user provisioning by enabling automated synchronization of user accounts and group memberships from an existing Microsoft Active Directory (AD) environment.

B : It facilitates delegated administration, allowing authorized AD users to manage specific resources within the OCI identity domain.

C : It strengthens access security by providing an additional layer of authentication through AD integration.

D : It directly integrates with OCI MFA providers, allowing for seamless enforcement of MFA for users authenticated through AD credentials.

Answer: A

Question 3

You are a security architect at your organization and have noticed an increase in cyberattacks on your applications, including Cross-Site Scripting (XSS) and SQL Injection. To mitigate these threats, you decide to use OCI Web Application Firewall (WAF). Which type of OCI WAF rule should you configure to protect against these attacks?

A : Access control rule

B : Protection rule

C : Rate Limiting rule

D : Encryption rule

Answer: B

Question 4

A company is securing its compute instances (VMs and Bare Metal Machines) in Oracle Cloud infrastructure (OCI) using a network firewall. As shown in the diagram, traffic flows from the internet Gateway (IGW) to the firewall in the Public DMZ Subnet, and then to the compute instances in the Public Subnet.

A : If the policy used with the firewall has no rules specified, the firewall allows all traffic.

B : Ensure that any security list or NSG rules allow the traffic to enter the firewall for appropriate evaluation.

C : Add stateful rules to the security list attached to the firewall subnet or include the firewall in an NSG containing stateful rules for better performance.

D : Security list and NSG rules associated with the firewall subnet and VNICs are evaluated after the firewall.

Answer: B

Question 5

Based on the provided diagram, you have a group of critical compute instances in a private subnet that require vulnerability using the Oracle Cloud Infrastructure(OCI) Vulnerability Scanning Service (VSS)."What additional configuration is required to enable VSS to scan instances in the private subnet

A : VSS cannot scan private instances. You need to move them to a public subnet for vulnerability scanning.

B : Configure a service gateway in the VCN and a route rule to direct traffic for the VSS service through the gateway.

C : No additional configuration is needed. VSS can access private instances by default.

D : Use an OCI Bastion session to establish connectivity and forward scan results from the private instances."

Answer: B

Page: 1 / 8

Total 36 Questions | Updated On: Oct 25, 2026

Add To Cart