Trusted Worldwide Questions & Answers
Oracle 1Z0-1104-25 Dumps - Pass Oracle Cloud Infrastructure 2025 Security Professional Exam in 2026
The Oracle 1Z0-1104-25 exam, Oracle Cloud Infrastructure 2025 Security Professional, belongs to the Oracle Cloud and Oracle Cloud Infrastructure certification track. It is designed for professionals who work with OCI security services, identity controls, workload protection, data protection, and monitoring. This certification matters for candidates who want to validate practical security skills in Oracle Cloud Infrastructure and strengthen their role in cloud security operations.
Exam Topics
| # | Exam Topics | Sub-Topics | Approximate Weightage (%) |
|---|---|---|---|
| 1 | OCI Security Introduction | OCI security concepts; shared responsibility model; core security services | 10% |
| 2 | Implementing Identity and Access Management (IAM) | Users and groups; policies and compartments; authentication and authorization | 20% |
| 3 | Protecting Infrastructure - Network and Applications | VCN security; security lists and network security groups; application access controls | 18% |
| 4 | Implementing OS and Workload Protection | Host security; workload hardening; vulnerability reduction and protection controls | 17% |
| 5 | Protecting Data | Encryption concepts; key management; data access and protection settings | 18% |
| 6 | Detecting, Remediating, and Monitoring OCI Resources | Logging and monitoring; alerting and detection; remediation and security visibility | 17% |
This exam tests how well candidates can apply OCI security knowledge in real scenarios, not just memorize terms. You need a solid understanding of IAM, network protection, workload security, data safeguards, and monitoring practices. The questions are designed to measure practical decision-making, service familiarity, and the ability to choose the right security controls for Oracle Cloud Infrastructure.
How QA4Exam.com Helps You Pass
QA4Exam.com provides an Exam PDF with actual questions and answers and an Online Practice Test built to help you prepare for the Oracle 1Z0-1104-25 exam with confidence. The practice materials offer a real exam simulation so you can understand the question style and pacing before test day. Our updated questions and verified answers help you focus on the most relevant content for the Oracle Cloud Infrastructure 2025 Security Professional exam. You also get valuable time management practice, which improves your ability to complete the exam efficiently. With the right preparation tools, you can study smarter and aim to pass on your first attempt.
Frequently Asked Questions
1. What is the Oracle 1Z0-1104-25 exam?
It is the Oracle Cloud Infrastructure 2025 Security Professional exam in the Oracle Cloud and Oracle Cloud Infrastructure certification track.
2. Who should take this exam?
It is intended for professionals who work with OCI security, identity and access management, data protection, monitoring, and workload protection.
3. Is the Oracle 1Z0-1104-25 exam difficult?
It can be challenging because it tests practical OCI security knowledge and the ability to apply the right controls in different scenarios.
4. Can I pass with only braindumps?
Braindumps alone are not ideal. You should also understand the concepts, review the topics, and use practice tests to build confidence.
5. Do I need hands-on OCI experience?
Hands-on experience is helpful because the exam focuses on real security tasks, but structured study and practice can also support your preparation.
6. Are QA4Exam.com dumps and practice tests enough to prepare?
QA4Exam.com materials are designed to give you actual questions and answers plus exam simulation, but using them with topic review is the best approach.
7. How do these materials help me pass on the first attempt?
They help you learn the exam pattern, practice time management, review verified answers, and focus on up-to-date questions that match the exam scope.
8. What format do QA4Exam.com products use?
The offering includes an Exam PDF with questions and answers and an Online Practice Test that simulates the exam experience.
The questions for 1Z0-1104-25 were last updated on Jul 18, 2026.
- Viewing page 1 out of 7 pages.
- Viewing questions 1-5 out of 36 questions
You are a security architect at your organization and have noticed an increase in cyberattacks on your applications, including Cross-Site Scripting (XSS) and SQL Injection. To mitigate these threats, you decide to use OCI Web Application Firewall (WAF).
Which type of OCI WAF rule should you configure to protect against these attacks?
SIMULATION
Task 3: Create a Master Encryption Key
Note: OCI Vault to store the key required by this task is created in the root compartment as PBI_Vault_SP
Create an RSA Master Encryption Key (MEK), where:
Key name: PBT-CERT-MEK-01-
For example, if your username is 99008677-lab.user01, then the MEK name should be PBT-CERT-MEK-01990086771abuser01
Ensure you eliminate special characters from the user name.
Key shape: 4096 bits
Enter the OCID of the Master Encryption Key created in the provided text box:
Task 3: Create a Master Encryption Key
Step 1: Access the OCI Vault
Log in to the OCI Console.
Navigate to Identity & Security > Vault.
Select the root compartment.
Locate and click on the vault named PBI_Vault_SP.
Step 2: Create the Master Encryption Key
In the PBI_Vault_SP vault details page, under Resources, click Keys.
Click Create Key.
Enter the following details:
Name: Replace <username> with your username (e.g., if your username is 99008677-lab.user01, remove special characters like - and . to get 99008677labuser01, then use PBT-CERT-MEK-0199008677labuser01).
Key Shape: Select RSA with 4096 bits.
Protection Mode: Select HSM (Hardware Security Module) if available, or Software if HSM is not required (based on vault capabilities).
Compartment: Ensure it's set to the root compartment (where PBI_Vault_SP resides).
Leave other settings (e.g., key usage) as default unless specified.
Click Create Key and wait for the key to be generated.
Step 3: Retrieve and Enter the OCID
After the key is created, go to the Keys section under PBI_Vault_SP.
Click on the key named PBT-CERT-MEK-01<username> (e.g., PBT-CERT-MEK-0199008677labuser01).
Copy the OCID (a long string starting with ocid1.key., unique to your tenancy) from the key details page.
Enter the copied OCID exactly as it appears into the provided text box.
Task 4: Create a Certificate Authority (CA)
Create a certificate authority, where:
CA name: PBT-CERT-CA-01-<username>
For example, if your username is 99008677-lab.user01, then the certificate authority name should be PBT-CERT-CA-01990086771abuser01
Ensure you eliminate special characters from the user name.
Common name: PBT-CERT-OCICA-01
Master Encryption Key: PBT-CERT-MEK-01 (created in the previous task)
Task 4: Create a Certificate Authority (CA)
Step 1: Access the OCI Vault
Log in to the OCI Console.
Navigate to Identity & Security > Vault.
Select the root compartment.
Locate and click on the vault named PBI_Vault_SP.
Step 2: Create the Certificate Authority
In the PBI_Vault_SP vault details page, under Resources, click Certificate Authorities.
Click Create Certificate Authority.
Enter the following details:
Name: Replace <username> with your username (e.g., if your username is 99008677-lab.user01, remove special characters like - and . to get 99008677labuser01, then use PBT-CERT-CA-0199008677labuser01).
Common Name: Enter PBT-CERT-OCICA-01.
Master Encryption Key: Select the PBT-CERT-MEK-01<username> key created in Task 3 (e.g., PBT-CERT-MEK-0199008677labuser01).
Subject: Leave as default or adjust (e.g., Organization, Country) if required by your setup.
Validity Period: Set as needed (e.g., 10 years), or use the default.
Compartment: Ensure it's set to the root compartment.
Click Create Certificate Authority and wait for the CA to be provisioned.
Step 3: Verify the Certificate Authority
After creation, go to the Certificate Authorities section under PBI_Vault_SP.
Confirm the CA PBT-CERT-CA-01<username> (e.g., PBT-CERT-CA-0199008677labuser01) is listed and its status is active.
Based on the provided diagram, you have a group of critical compute instances in a private subnet that require vulnerability using the Oracle Cloud Infrastructure (OCI) Vulnerability Scanning Service (VSS).
"What additional configuration is required to enable VSS to scan instances in the private subnet
Within OCI IAM identity domains, the AD Bridge component serves a critical role. How does the AD Bridge functionality specifically enhance Identity and Access Management (IAM) practices?
In Oracle Cloud Infrastructure (OCI), bare metal instances provide customers with direct access to the underlying hardware. To mitigate security risks when a customer terminates a bare metal instance, OCI utilizes Root-of-Trust hardware.
What is the primary function of the Root-of-Trust hardware in this context?
Unlock All Questions for Oracle 1Z0-1104-25 Exam
Full Exam Access, Actual Exam Questions, Validated Answers, Anytime Anywhere, No Download Limits, No Practice Limits
Get All 36 Questions & Answers