Oracle Cloud Infrastructure Security Professional (1Z0-1104-26) - Practice Exam 1

1. A backup recovery design uses customer-managed keys. What should be validated in a recovery exercise?
2. A break-glass administrator account is required for emergencies. Which design best supports governance?
3. A budget alert reports unusual spending that may indicate compromised resources. What should the security workflow do?
4. A central identity provider is used for workforce access. Which design remains necessary in OCI?
5. A compartment must reject creation of public buckets under its security recipe. Which capability provides operation-time enforcement?
6. A compliance control requires historical evidence of resource access changes. What is necessary beyond enabling collection today?
7. A compute workload uses a human administrator's signing key to read secrets. Which replacement is preferable?
8. A container image includes a private signing key in an earlier image layer, then deletes it in a later layer. What should the team assume?
9. A customer-managed key encrypts active production data. What is the main risk of deleting it?
10. A database security team needs discovery of sensitive columns and masking for nonproduction copies. Which OCI service should it evaluate?
11. A database should accept traffic only from the application tier. Which control best expresses tier membership?
12. A deployment pipeline needs to modify one application. Which TWO controls reduce its compromise impact? Select TWO.
13. A network firewall is inserted into a hub transit path. Which property is critical for stateful inspection?
14. A new compartment was created after monitoring targets were configured. What should be checked?
15. A policy is granted at a parent compartment. What must a security review consider for child compartments?
16. A private server needs occasional administrator access without standing public SSH exposure. Which capability is appropriate?
17. A public application must defend against supported HTTP attack patterns. Which OCI capability should be evaluated?
18. A responder must identify who changed a production network rule. Which source is most directly relevant?
19. A responder plans to revoke a key used by several automated services. What should be established while containing the threat?
20. A scanner finds no issues on a workload that was never successfully scanned. What is the correct interpretation?
21. A secret is rotated, but a running application continues using the old value. What should be checked?
22. A security rule is stateless. What must the network design explicitly account for?
23. A security team uses a Cloud Guard score as its only measure of compliance. What limitation should be explained?
24. A service account has not been used for months but retains broad privileges. What is the appropriate review action?
25. A service needs a database password that changes periodically. Which OCI facility should be evaluated?
26. A suspected compromised instance still serves production traffic. Which response is most appropriate?
27. A team clones or customizes security recipes. What should its governance process preserve?
28. A team exports audit logs outside OCI. What must the design consider?
29. A team introduces tag-based conditions in access policies. What is a critical governance concern?
30. A team mandates customer-managed keys for supported storage services. Which design is essential?
31. A team must evaluate privileged database accounts and risky user configurations. Which Data Safe capability is relevant?
32. A team wants evidence of network activity alongside configuration findings. Which source should complement posture data?
33. A user belongs to several groups with different policies. How should access be evaluated?
34. A user can manage compute in an application compartment but cannot launch into a shared-network subnet. What should be checked?
35. A vulnerability scan identifies a critical guest package issue. What should remediation include?
36. A workload has a private IP and still runs vulnerable customer-managed software. What is the correct security position?
37. A workload must protect sensitive traffic over a private hybrid connection. What is correct?
38. An administrator's API signing key is exposed in a repository. What should happen first?
39. An application stores regulated records in encrypted storage but logs those records in plaintext. What is the security gap?
40. An automated responder can quarantine workloads. What safeguards should be included?
41. An employee leaves the company. What should identity offboarding address?
42. An existing resource predates a new Security Zone and may violate its requirements. Which complementary service helps identify such problems?
43. An incident is contained and service restored. What should the review produce?
44. An internet-facing API validates JWTs but does not check whether callers own the requested records. What remains vulnerable?
45. An NSG permits a narrow ingress range, but a subnet security list also permits a broader range. What should the reviewer recognize?
46. An operations group must inspect resources in one application compartment without changing them. What is the best policy scope?
47. Cloud Guard reports a risky resource configuration. What should determine whether remediation is automatic?
48. Security findings are delivered to an external incident platform. Which integration behavior is important?
49. Two teams need separate roles for key administration and application data access. What should be designed?
50. What is the relationship between an IAM grant and a Security Zone policy?

Comments — 0