Free Oracle 1Z0-1104-26 Exam Questions

Become Oracle Certified with updated 1Z0-1104-26 exam questions and correct answers

Page: 1 / 8

Total 36 Questions | Updated On: Aug 11, 2026

Add To Cart

Question 1

A company is securing its compute instances (VMs and Bare Metal Machines) in Oracle Cloud infrastructure (OCI) using a network firewall. As shown in the diagram, traffic flows from the internet Gateway (IGW) to the firewall in the Public DMZ Subnet, and then to the compute instances in the Public Subnet.

A : If the policy used with the firewall has no rules specified, the firewall allows all traffic.

B : Ensure that any security list or NSG rules allow the traffic to enter the firewall for appropriate evaluation.

C : Add stateful rules to the security list attached to the firewall subnet or include the firewall in an NSG containing stateful rules for better performance.

D : Security list and NSG rules associated with the firewall subnet and VNICs are evaluated after the firewall.

Answer: B

Question 2

You are the first responder of a security incident for ABC Org. You have identified several IP addresses and URLs in the logs that you suspect may be related to the incident. However, you need more information to confidently determine whether they are indeed malicious or not. Which OCI service can you use to obtain a more refined information and confidence score for these identified indicators?

A : OCI Incidence Responder

B : OCI Threat Intelligence

C : OCI Web Application Firewall

D : OCI Security Zones

Answer: B

Question 3

"Your company is building a highly available and secure web application on OCI. Because of increasing malicious web-based attacks, the security team has mandated that web servers should not be exposed directly to the Internet. How should you architect the solution while ensuring fault tolerance and security?

A : Deploy at least three web servers in different fault domains within a public subnet, each with a public IP address. Deploy Web Application Firewall (WAF), and configure an origin for each public IP.

B : Deploy at least three web servers in different fault domains within a private subnet. Place a public load balancer in a public subnet, but skip WAF configuration.

C : Deploy at least three web servers in different fault domains within a private subnet. Place a public load balancer in a public subnet and configure a back-end set for all web servers. Deploy Web Application Firewall (WAF) and set the load balancer public IP address as the origin.

D : Deploy at least three web servers in different fault domains within a public subnet. Use OCI Traffic Management service for DNS-based load balancing."

Answer: C

Question 4

"You are designing a secure access strategy for compute instances deployed within a private subnet of an OCI Virtual Cloud Network (VCN). Your security policy requires that no compute instances in the private subnet should have direct Internet access, and administrative access should be controlled. Which statement best describes the role of an OCI Bastion in securing access to these private compute instances?

A : It provides a direct public endpoint for the compute instance, enabling remote access.

B : It serves as a secondary authentication point, verifying user credentials before granting access to the compute instance.

C : It acts as a firewall, blocking any external access to the private compute instance.

D : It creates a secure, publicly accessible entry point to access target resources in a private subnet."

Answer: D

Question 5

You have created a compartment TEST in your subscribed tenancy. Then, you created two groups, test1 and test2, and want the users in these groups to be able to manage all the resources in the TEST compartment. Which policy would you use to achieve this?

A : Allow group/test*/to manage all resources in compartment test.

B : Allow group test1, test2 to manage all resources in compartment test.

C : Allow any-user to manage all resources in compartment test where any {request.groups.test1, test2}

D : Allow any-user to manage all resources in compartment test where request.group='test*'

Answer: B

Page: 1 / 8

Total 36 Questions | Updated On: Aug 11, 2026

Add To Cart