VendorsExamsEnterprise
Support
Request an ExamContact UsFAQ

OCI 2025 Security Professional Free Sample Questions

12 free sample questions160 in the full practice test

Try simulator

1Z0-1104-25 Sample Questions

  1. Question 1

    Intermediate

    Protecting Infrastructure - Network and Applications · Implement Network Security Groups (NSGs), Security Lists, and Network Firewalls

    A global financial institution is designing a Zero Trust architecture on OCI. They require a network security model that decouples security policies from network topology, allowing them to define intent-based policies using attributes rather than IP addresses and ports. Which OCI capability should they implement to meet this specific requirement for 2025 standards?

    Answer and explanation

    Correct answer: A

    OCI Zero Trust Packet Routing (ZPR) is a new feature (emphasized in the 2025 syllabus) that allows organizations to define security policies based on 'intent' and resource attributes rather than physical network coordinates like IP addresses and ports. It decouples security from network topology.

  2. Question 2

    Advanced

    Implementing OS and Workload Protection · Utilize OS management to manage and automate system updates

    You are transitioning your organization's patching strategy from the legacy OS Management Service to the new OCI OS Management Hub. You have several instances in private subnets that do not have direct internet access or a NAT gateway. To enable OS Management Hub to manage these private instances, what component must you configure?

    Answer and explanation

    Correct answer: A

    In OCI OS Management Hub, a Management Station is a dedicated instance that acts as a mirror for software sources and a proxy for management traffic. It is specifically designed to support instances in private subnets or disconnected environments.

  3. Question 3

    Intermediate

    Detecting, Remediating, and Monitoring OCI Resources · Implement Security Zones and Security Advisor

    While troubleshooting a deployment in a compartment associated with an OCI Security Zone, a DevOps engineer receives a '400-InvalidParameter' error when attempting to create a public Compute instance. The Security Zone recipe is set to 'Maximum Security'. What is the most likely cause of this error?

    Answer and explanation

    Correct answer: C

    Security Zones enforce security best practices. The 'Maximum Security' recipe explicitly denies the creation of compute instances with public IP addresses to prevent internet exposure. This is a policy enforcement error, not an IAM permission error.

  4. Question 4

    Advanced

    Protecting Infrastructure - Network and Applications · Implement Network Security Groups (NSGs), Security Lists, and Network Firewalls

    A security architect is configuring OCI Network Firewall to inspect traffic between an on-premises data center and a VCN. The traffic flows through a Dynamic Routing Gateway (DRG). To ensure the firewall inspects this traffic, how should the VCN routing be configured?

    Answer and explanation

    Correct answer: B

    To insert a Network Firewall into the flow, you must use VCN ingress routing. You attach a route table to the DRG attachment (ingress to VCN) that directs traffic destined for the VCN subnets to the private IP address of the OCI Network Firewall.

  5. Question 5

    IntermediateMultiple answers

    Detecting, Remediating, and Monitoring OCI Resources · Use Cloud Guard to monitor and analyze the security posture

    Which TWO statements accurately describe the behavior of OCI Cloud Guard when a problem is detected? (Select TWO)

    Answer and explanation

    Correct answers: A, C

    Cloud Guard uses Detector Recipes (Configuration and Activity) to define what constitutes a problem. When a rule in a recipe is triggered, a Problem is created.

    Cloud Guard Responders can be set to 'Automatic' mode, allowing them to execute remediation actions (like disabling a public bucket) immediately upon detection.

  6. Question 6

    Beginner

    Protecting Data · Configure and manage secrets within the OCI Vault

    A developer needs to store database credentials securely and retrieve them programmatically within an application running on OCI Container Instances. The credentials must not be hardcoded. Which OCI Vault component should be used to store these specific credentials?

    Answer and explanation

    Correct answer: D

    In OCI Vault, a 'Secret' is used to store credentials, passwords, certificates, and other sensitive data. Keys are used for encryption/decryption, whereas Secrets are for storage and retrieval of sensitive text/binary data.

Register free for 6 more questions

Or unlock all 160 1Z0-1104-25 questions with explanations, timed mode and flashcards.

Related practice tests

All Oracle practice exams