Trusted Worldwide Questions & Answers
Oracle 1Z0-1104-25 Dumps - Pass Oracle Cloud Infrastructure 2025 Security Professional Exam in 2026
The Oracle 1Z0-1104-25 exam, Oracle Cloud Infrastructure 2025 Security Professional, belongs to the Oracle Cloud and Oracle Cloud Infrastructure certification track. It is designed for professionals who work with OCI security services, identity controls, workload protection, data protection, and monitoring. This certification matters for candidates who want to validate practical security skills in Oracle Cloud Infrastructure and strengthen their role in cloud security operations.
Exam Topics
| # | Exam Topics | Sub-Topics | Approximate Weightage (%) |
|---|---|---|---|
| 1 | OCI Security Introduction | OCI security concepts; shared responsibility model; core security services | 10% |
| 2 | Implementing Identity and Access Management (IAM) | Users and groups; policies and compartments; authentication and authorization | 20% |
| 3 | Protecting Infrastructure - Network and Applications | VCN security; security lists and network security groups; application access controls | 18% |
| 4 | Implementing OS and Workload Protection | Host security; workload hardening; vulnerability reduction and protection controls | 17% |
| 5 | Protecting Data | Encryption concepts; key management; data access and protection settings | 18% |
| 6 | Detecting, Remediating, and Monitoring OCI Resources | Logging and monitoring; alerting and detection; remediation and security visibility | 17% |
This exam tests how well candidates can apply OCI security knowledge in real scenarios, not just memorize terms. You need a solid understanding of IAM, network protection, workload security, data safeguards, and monitoring practices. The questions are designed to measure practical decision-making, service familiarity, and the ability to choose the right security controls for Oracle Cloud Infrastructure.
How QA4Exam.com Helps You Pass
QA4Exam.com provides an Exam PDF with actual questions and answers and an Online Practice Test built to help you prepare for the Oracle 1Z0-1104-25 exam with confidence. The practice materials offer a real exam simulation so you can understand the question style and pacing before test day. Our updated questions and verified answers help you focus on the most relevant content for the Oracle Cloud Infrastructure 2025 Security Professional exam. You also get valuable time management practice, which improves your ability to complete the exam efficiently. With the right preparation tools, you can study smarter and aim to pass on your first attempt.
Frequently Asked Questions
1. What is the Oracle 1Z0-1104-25 exam?
It is the Oracle Cloud Infrastructure 2025 Security Professional exam in the Oracle Cloud and Oracle Cloud Infrastructure certification track.
2. Who should take this exam?
It is intended for professionals who work with OCI security, identity and access management, data protection, monitoring, and workload protection.
3. Is the Oracle 1Z0-1104-25 exam difficult?
It can be challenging because it tests practical OCI security knowledge and the ability to apply the right controls in different scenarios.
4. Can I pass with only braindumps?
Braindumps alone are not ideal. You should also understand the concepts, review the topics, and use practice tests to build confidence.
5. Do I need hands-on OCI experience?
Hands-on experience is helpful because the exam focuses on real security tasks, but structured study and practice can also support your preparation.
6. Are QA4Exam.com dumps and practice tests enough to prepare?
QA4Exam.com materials are designed to give you actual questions and answers plus exam simulation, but using them with topic review is the best approach.
7. How do these materials help me pass on the first attempt?
They help you learn the exam pattern, practice time management, review verified answers, and focus on up-to-date questions that match the exam scope.
8. What format do QA4Exam.com products use?
The offering includes an Exam PDF with questions and answers and an Online Practice Test that simulates the exam experience.
The questions for 1Z0-1104-25 were last updated on Sep 3, 2026.
- Viewing page 1 out of 7 pages.
- Viewing questions 1-5 out of 36 questions
SIMULATION
Challenge 1 - Task 1
Integrate TLS Certificate Issued by the OCI Certificates Service with Load Balancer
You are a cloud engineer at a tech company that is migrating its services to Oracle Cloud Infrastructure (OCI). You are required to set up secure communication for your web application using OCI's Certificate service. You need to create a Certificate Authority (CA), issue a TLS/SSL server certificate, and configure a load balancer to use this certificate to ensure encrypted traffic between clients and the backend servers.
Review the architecture diagram, which outlines the resources you'll need to address the requirement.
Preconfigured
To complete this requirement, you are provided with the following:
Access to an OCI tenancy, an assigned compartment, and OCI credentials
Required IAM policies
OCI Vault to store the secret required by the program, which is created in the root compartment as PBI_Vault_SP
Task 1: Create and Configure a Virtual Cloud Network (VCN)
Create a Virtual Cloud Network (VCN) named PBT-CERT-VCN-01 with the following specifications:
VCN with a CIDR block of 10.0.0.0/16
Subnet 1 (Compute Instance):
Name: Compute-Subnet-PBT-CERT
CIDR Block: 10.0.1.0/24
Subnet 2 (Load Balancer):
Name: LB-Subnet-PBT-CERT-SNET-02
CIDR Block: 10.0.2.0/24
Internet Gateway for external connectivity
Route table and security lists:
Security List named PBT-CERT-CS-SL-01 for Subnet 1 (Compute-Subnet-PBT-CERT) to allow SSH (port 22) traffic
Security List named PBT-CERT-LB-SL-01 for Subnet 2 (LB-Subnet-PBT-CERT) to allow HTTPS (port 443) traffic
"Enter the OCID of the created VCN in the text box below.
Challenge 1: Integrate TLS Certificate Issued by the OCI Certificates Service with Load Balancer
Task 1: Create and Configure a Virtual Cloud Network (VCN)
Step 1: Create the Virtual Cloud Network (VCN)
Log in to the OCI Console.
Navigate to Networking > Virtual Cloud Networks.
Click Create Virtual Cloud Network.
Select VCN with Internet Connectivity (to include an Internet Gateway by default).
Enter the following details:
Name: PBT-CERT-VCN-01
Compartment: Select your assigned compartment.
VCN CIDR Block: 10.0.0.0/16
Leave other settings as default (e.g., create a new public subnet and route table).
Click Create Virtual Cloud Network. Wait for the VCN to be created.
Step 2: Create Subnet 1 (Compute-Subnet-PBT-CERT)
In the VCN details page for PBT-CERT-VCN-01, click Subnets under Resources.
Click Create Subnet.
Enter the following details:
Name: Compute-Subnet-PBT-CERT
Subnet Type: Regional
CIDR Block: 10.0.1.0/24
Route Table: Select the default route table created with the VCN.
Subnet Access: Public Subnet (to allow internet access).
DNS Resolution: Enabled.
Click Create.
Step 3: Create Subnet 2 (LB-Subnet-PBT-CERT-SNET-02)
In the VCN details page, click Subnets under Resources.
Click Create Subnet.
Enter the following details:
Name: LB-Subnet-PBT-CERT-SNET-02
Subnet Type: Regional
CIDR Block: 10.0.2.0/24
Route Table: Select the default route table created with the VCN.
Subnet Access: Public Subnet (to allow internet access for the load balancer).
DNS Resolution: Enabled.
Click Create.
Step 4: Verify Internet Gateway
In the VCN details page, under Resources, click Internet Gateways.
Ensure an Internet Gateway is listed and attached to PBT-CERT-VCN-01. If not created, click Create Internet Gateway, name it (e.g., PBT-CERT-IGW), and attach it.
Step 5: Configure Route Table
In the VCN details page, under Resources, click Route Tables.
Select the default route table or create a new one named PBT-CERT-RT-01.
Click Add Route Rule. 4 - Destination CIDR Block: 0.0.0.0/0
Target Type: Internet Gateway
Target: Select the Internet Gateway created (e.g., PBT-CERT-IGW).
Click Add Route Rule and save.
Step 6: Create Security List for Subnet 1 (Compute-Subnet-PBT-CERT)
In the VCN details page, under Resources, click Security Lists.
Click Create Security List.
Enter the following:
Name: PBT-CERT-CS-SL-01
Compartment: Your assigned compartment.
Add the following ingress rule:
Source CIDR: 0.0.0.0/0 (allow from any source, adjust as per security needs)
IP Protocol: TCP
Source Port Range: All
Destination Port Range: 22 (for SSH)
Allows: Traffic
Click Create.
Step 7: Create Security List for Subnet 2 (LB-Subnet-PBT-CERT-SNET-02)
In the VCN details page, under Resources, click Security Lists.
Click Create Security List.
Enter the following:
Name: PBT-CERT-LB-SL-01
Compartment: Your assigned compartment.
Add the following ingress rule:
Source CIDR: 0.0.0.0/0 (allow from any source, adjust as per security needs)
IP Protocol: TCP
Source Port Range: All
Destination Port Range: 443 (for HTTPS)
Allows: Traffic
Click Create.
Step 8: Retrieve and Enter VCN OCID
Go to the VCN details page for PBT-CERT-VCN-01.
Copy the OCID from the VCN information section.
Enter the OCID in the provided text box.
Which are the essential components to create a rule for the Oracle Cloud Infrastructure (OCI) Events Service?
According to the Oracle Cloud Infrastructure (OCI) Shared Responsibility Model, which statement accurately reflects OCI's responsibility for security?
You're managing an Oracle Cloud Infrastructure (OCI) environment where a public website hosts downloadable assets stored in Object Storage buckets. These buckets need to be publicly accessible for website visitors, but Cloud Guard keeps flagging them as security risks.
How can Cloud Guard be configured to ignore problems specific to public buckets while still ensuring security checks are applied to other resources that require them?
SIMULATION
Task 6: Create Load Balancer and Attach Certificate
Create a Load Balancer with the name PBT-CERT-LB-01 in subnet LB-Subnet-PBT-CERT-SNET-02
Create a Listener for the load balancer, where:
Name: PBT-CERT-LB_LTSN_01
Protocol: HTTPS
Port: 443
Attach the certificate PBT-CERT-01-
Attach the security list PBT-CERT-LB-SL-01 to subnet LB-Subnet-PBT-CERT-SNET-02
Task 6: Create Load Balancer and Attach Certificate
Step 1: Create the Load Balancer
Log in to the OCI Console.
Navigate to Networking > Load Balancers.
Click Create Load Balancer.
Enter the following details:
Name: PBT-CERT-LB-01
Compartment: Select your assigned compartment.
Load Balancer Type: Select Public.
Virtual Cloud Network: Select PBT-CERT-VCN-01.
Subnet: Select LB-Subnet-PBT-CERT-SNET-02.
Shape: Choose a shape (e.g., 10 Mbps, adjust based on needs).
Click Next.
Leave backend sets and listeners as default for now (we'll configure the listener next).
Click Create Load Balancer and wait for it to be provisioned.
Step 2: Create a Listener
Once the load balancer is created, go to the Load Balancers page and click on PBT-CERT-LB-01.
Under Resources, click Listeners.
Click Create Listener.
Enter the following details:
Name: PBT-CERT-LB_LTSN_01
Protocol: Select HTTPS.
Port: Enter 443.
Certificate: Click Add Certificate, then select the PBT-CERT-01<username> certificate (e.g., PBT-CERT-0199008677labuser01) created in Task 5.
Leave other settings (e.g., SSL handling) as default unless specified.
Click Create.
Step 3: Configure the Backend Set
In the PBT-CERT-LB-01 details page, under Resources, click Backend Sets.
Click Create Backend Set (if not already created).
Enter basic details (e.g., name like PBT-CERT-BS-01).
Add a backend server:
IP Address: Use the private IP of PBT-CERT-VM-01 (find this in the instance details under Compute > Instances).
Port: 80 (HTTP, as configured on the web server).
Protocol: HTTP.
Click Create.
Step 4: Attach the Security List to the Subnet
Navigate to Networking > Virtual Cloud Networks.
Select PBT-CERT-VCN-01 and click Subnets.
Click on LB-Subnet-PBT-CERT-SNET-02.
Under Security Lists, ensure PBT-CERT-LB-SL-01 is attached. If not:
Click Edit.
Remove the default security list and add PBT-CERT-LB-SL-01.
Click Save Changes.
Step 5: Verify the Configuration
Ensure the load balancer health status is OK (check under Backend Sets > Health).
Test by accessing https://<load-balancer-public-ip> in a browser (replace with the public IP from the load balancer details).
Unlock All Questions for Oracle 1Z0-1104-25 Exam
Full Exam Access, Actual Exam Questions, Validated Answers, Anytime Anywhere, No Download Limits, No Practice Limits
Get All 36 Questions & Answers