1z0-1104-21 無料問題集「Oracle Cloud Infrastructure Security 2021 Associate」

（A）Customer isolation

（B）Security controls

（C）Data encryption

（D）Identity Federation

（A）Data Guard

（B）NAT Gateway

（C）Local VCN Peering

（D）Remote VCN Peering

（A）Boot Volume

（B）ETCD

（C）Block Volume

（D）Oracle Functions

（A）Certificates

（B）Vault Id

（C）ASCII Value

（D）Secret Name

（A）Penetration test report

（B）Bridge letter

（C）Certificate

（D）Attestation

（A）ACCOUNT ACCESS MANAGEMENT

（B）Strong Isolation

（C）Strong IAM Framework

（D）MAINTAINING CUSTOMER DATA

（E）PROVIDING STRONG SECURITY LIST

（A）SQL Injection

（B）Ports that are unintentionally left open can be a potential attack vector for cloud resources

（C）Distributed Denial of Service (DDoS)

（D）CIS published Industry-standard benchmarks

（A）A boot volume can be moved from a security zone to a standard compartment.

（B）A compute instance cannot be moved from a security zone to a standard compartment.

（C）Resources in a security zone must be automatically backed up regularly.

（D）Resources in a security zone should not be accessible from the public internet.

（A）Configure Bot Management strategies for a website traffic

（B）Import latest OWASP Core Rule Sets

（C）WAF edge nodes with High Availability

（D）Configure WAF policies for websites

（A）Shamir's secret sharing algorithm should be used to unseal the vault

（B）Object Storage must be created to run secret service

（C）Digest Hash should be created of the secret value

（D）Vault-managed key is necessary to encrypt the secret