Online Access Free 1z0-1104-25 Practice Test

Based on the provided diagram, you have a group of critical compute instances in a private subnet that require vulnerability using the Oracle Cloud Infrastructure(OCI) Vulnerability Scanning Service (VSS).

"What additional configuration is required to enable VSS to scan instances in the private subnet

• A.Configure a service gateway in the VCN and a route rule to direct traffic for the VSS service through the gateway.
• B.Use an OCI Bastion session to establish connectivity and forward scan results from the private instances."
• C.No additional configuration is needed. VSS can access private instances by default.
• D.VSS cannot scan private instances. You need to move them to a public subnet for vulnerability scanning.

"Your company is building a highly available and secure web application on OCI. Because of increasing malicious web-based attacks, the security team has mandated that web servers should not be exposed directly to the Internet.
How should you architect the solution while ensuring fault tolerance and security?

• A.Deploy at least three web servers in different fault domains within a private subnet. Place a public load balancer in a public subnet, but skip WAF configuration.
• B.Deploy at least three web servers in different fault domains within a public subnet. Use OCI Traffic Management service for DNS-based load balancing."
• C.Deploy at least three web servers in different fault domains within a private subnet. Place a public load balancer in a public subnet and configure a back-end set for all web servers. Deploy Web Application Firewall (WAF) and set the load balancer public IP address as the origin.
• D.Deploy at least three web servers in different fault domains within a public subnet, each with a public IP address. Deploy Web Application Firewall (WAF), and configure an origin for each public IP.

Which are the essential components to create a rule for the Oracle Cloud Infrastructure (OCI) Events Service?

• A.Install Key and Actions
• B.Install Key and Service Connector
• C.Rule Conditions and Management Agent Cloud Service
• D.Rule Conditions and Actions

"You are designing a secure access strategy for compute instances deployed within a private subnet of an OCI Virtual Cloud Network (VCN). Your security policy requires that no compute instances in the private subnet should have direct Internet access, and administrative access should be controlled.
Which statement best describes the role of an OCI Bastion in securing access to these private compute instances?

• A.It provides a direct public endpoint for the compute instance, enabling remote access.
• B.It serves as a secondary authentication point, verifying user credentials before granting access to the compute instance.
• C.It creates a secure, publicly accessible entry point to access target resources in a private subnet."
• D.It acts as a firewall, blocking any external access to the private compute instance.

Task 7: Verify the OCI Certificate with Load Balancer
Verify HTTPS connection to the load balancer by running the following command in Cloud Shell curl -k https://<Public IP of PBT-CERT-LB-01> Enter the following URL in the web browser:
https://<Public IP of PBT-CERT-LB-01>
If prompted with a certificate error, accept the risk and continue.
Verify web page content by ensuring the text, "You are visiting Web Server 1" from the index.html file is displayed in the browser See the solution below in Explanation.