Free 1Z0-1104-25 sample questions

Correct answer: Zero Trust Packet Routing (ZPR)

OCI Zero Trust Packet Routing (ZPR) is a new feature (emphasized in the 2025 syllabus) that allows organizations to define security policies based on 'intent' and resource attributes rather than physical network coordinates like IP addresses and ports. It decouples security from network topology.

Correct answer: Management Station

In OCI OS Management Hub, a Management Station is a dedicated instance that acts as a mirror for software sources and a proxy for management traffic. It is specifically designed to support instances in private subnets or disconnected environments.

Correct answer: The Maximum Security recipe prohibits assigning a public IP address to compute instances.

Security Zones enforce security best practices. The 'Maximum Security' recipe explicitly denies the creation of compute instances with public IP addresses to prevent internet exposure. This is a policy enforcement error, not an IAM permission error.

Correct answer: Create a VCN ingress routing table attached to the DRG attachment that points traffic to the Network Firewall private IP.

To insert a Network Firewall into the flow, you must use VCN ingress routing. You attach a route table to the DRG attachment (ingress to VCN) that directs traffic destined for the VCN subnets to the private IP address of the OCI Network Firewall.

Correct answers: Responders can be configured to automatically remediate specific problems without human intervention.; Problems are generated based on Detector Recipes that define rules for configuration and activity.

Cloud Guard Responders can be set to 'Automatic' mode, allowing them to execute remediation actions (like disabling a public bucket) immediately upon detection.

Cloud Guard uses Detector Recipes (Configuration and Activity) to define what constitutes a problem. When a rule in a recipe is triggered, a Problem is created.

Correct answer: Secret

In OCI Vault, a 'Secret' is used to store credentials, passwords, certificates, and other sensitive data. Keys are used for encryption/decryption, whereas Secrets are for storage and retrieval of sensitive text/binary data.