Free Oracle 1Z0-1104-25 Exam Actual Questions & Explanations

Last updated on: Aug 2, 2026
Author: Ines Edwards (Oracle Cloud Security Certification Specialist)

The Oracle Cloud Infrastructure 2025 Security Professional exam (1Z0-1104-25) validates your ability to design, implement, and manage security controls across Oracle Cloud Infrastructure environments. This certification is ideal for cloud architects, security engineers, and infrastructure professionals who need to demonstrate expertise in OCI security practices. This landing page provides a structured study roadmap, practical exam insights, and access to quality preparation materials to help you pass with confidence.

1Z0-1104-25 Exam Syllabus & Core Topics

Use this topic map to guide your study for Oracle 1Z0-1104-25 (Oracle Cloud Infrastructure 2025 Security Professional) within the Oracle Cloud and Oracle Cloud Infrastructure certification path.

  • OCI Security Introduction: Understand the Oracle Cloud Infrastructure security model, shared responsibility framework, and how security domains integrate across the platform.
  • Implementing Identity and Access Management (IAM): Configure users, groups, compartments, and policies; apply least-privilege principles and manage federated access for enterprise environments.
  • Protecting Infrastructure - Network and Applications: Design network security using Virtual Cloud Networks, security lists, Network Security Groups, and Web Application Firewalls to defend against unauthorized access.
  • Implementing OS and Workload Protection: Secure compute instances through OS hardening, vulnerability management, and agent-based monitoring to reduce attack surface.
  • Protecting Data: Implement encryption at rest and in transit, manage keys using OCI Key Management Service, and apply data classification strategies.
  • Detecting, Remediating, and Monitoring OCI Resources: Use Cloud Guard, Security Advisor, and audit logs to detect threats, respond to incidents, and maintain continuous compliance visibility.

Question Formats & What They Test

The 1Z0-1104-25 exam combines knowledge-based and scenario-driven questions to assess both theoretical understanding and practical decision-making in real-world OCI security situations.

  • Multiple choice: Test recall of security concepts, feature capabilities, OCI service behaviors, and key terminology across all six domains.
  • Scenario-based items: Present realistic security challenges (e.g., "Your organization requires encryption for all data at rest; which OCI services and configurations meet this requirement?") and ask you to select the best architectural or operational decision.
  • Configuration reasoning: Evaluate policy statements, network rules, or IAM settings and determine their security impact or identify gaps in protection.

Questions progress in difficulty and emphasize practical application, so studying with real-world examples and hands-on labs strengthens both retention and exam performance.

Preparation Guidance

An effective study plan aligns each exam domain to focused weekly goals, reinforces connections between topics, and includes regular practice and review cycles. Dedicate 4-6 weeks to preparation, with time for both conceptual learning and scenario practice.

  • Map the six domains (OCI Security Introduction, IAM, Network and Application Protection, OS and Workload Protection, Data Protection, and Detection/Remediation/Monitoring) to weekly study blocks; track progress and revisit weaker areas.
  • Work through practice question sets regularly; read explanations carefully to understand not just the correct answer but why alternatives are incorrect.
  • Connect concepts across workflows: for example, how IAM policies enforce data access controls, or how Cloud Guard detects and remediates misconfigurations in network settings.
  • Complete a timed mini mock exam (30-40 questions) in week 5 to build pacing confidence and identify remaining knowledge gaps.
  • In the final week, review high-weight topics (IAM and data protection typically carry more exam weight) and do a final timed practice test under exam conditions.

Explore other Oracle certifications: view all Oracle exams.

Get the PDF & Practice Test

Strengthen your preparation with up-to-date resources from validexamdumps.com. These materials align to 1Z0-1104-25 and cover practical scenarios with clear explanations.

  • Q&A PDF with explanations: Topic-mapped questions that clarify why correct options are right and others aren't.
  • Practice Test: Realistic items, timed and untimed modes, progress tracking, and detailed review feedback.
  • Focused coverage: Aligned to OCI Security Introduction, IAM, Network and Application Protection, OS and Workload Protection, Data Protection, and Detection/Remediation/Monitoring, so you study what matters most.
  • Regular updates: Content refreshes that reflect syllabus and Oracle Cloud Infrastructure product changes.

Visit the exam page to download the PDF, Online Practice Test, or get a Bundle Discount offer for both formats: Oracle Cloud Infrastructure 2025 Security Professional.

Frequently Asked Questions

Which exam domains should I prioritize for 1Z0-1104-25?

Identity and Access Management (IAM) and Protecting Data typically carry the highest weight on the exam. However, all six domains are essential; focus first on IAM and data protection, then ensure solid coverage of network security and detection/monitoring. Neglecting any domain risks missing critical questions in the exam.

How do the six topics connect in a real OCI security project?

Security domains work together as layers: IAM establishes who can access what, network protection controls traffic flow, OS and workload protection hardens compute resources, data protection encrypts sensitive information, and detection/monitoring catches anomalies and enforces compliance. Understanding these connections helps you answer scenario questions that span multiple domains and design comprehensive security architectures.

How much hands-on OCI experience do I need before attempting this exam?

Ideally, you should have 6-12 months of practical OCI experience. Prioritize labs that cover IAM policy creation, network security list configuration, encryption key management, and Cloud Guard policy setup. If you lack hands-on experience, supplement study with free OCI trial accounts and guided labs to build confidence in real-world scenarios.

What are common mistakes that cost exam points?

Candidates often confuse IAM compartment boundaries with network isolation, overlook the shared responsibility model (what Oracle manages vs. what you manage), misunderstand encryption scope (at-rest vs. in-transit), or rush through scenario questions without fully reading all options. Read questions carefully, eliminate obviously wrong answers first, and verify your choice aligns with OCI best practices.

How should I structure my final week before the exam?

Dedicate 3-4 days to reviewing high-weight topics (IAM and data protection) using your notes and practice questions. Spend 2 days on a full-length timed practice test under exam conditions, then review every missed question. Use the last 1-2 days for light review of weak areas and mental preparation; avoid cramming new material. Ensure you are well-rested the night before the exam.

Get All 36 Questions
Question No. 1

"A programmer is developing a Node.js application which will run on a Linux server on their on-premises data center. This application will access various Oracle Cloud Infrastructure (OCI) services using OCI SDKs.

What is the secure way to access OCI services with OCI Identity and Access Management (IAM)?

Show Answer Hide Answer
Correct Answer: B

Question No. 2

Based on the provided diagram, you have a group of critical compute instances in a private subnet that require vulnerability using the Oracle Cloud Infrastructure (OCI) Vulnerability Scanning Service (VSS).

"What additional configuration is required to enable VSS to scan instances in the private subnet

Show Answer Hide Answer
Correct Answer: B

Question No. 3

"You are part of the security operations of an organization with thousands of users accessing Oracle Cloud Infrastructure (OCI). It is reported that an unknown user action was executed resulting in configuration errors. You are tasked with identifying the details of all users who were active in the last six hours along with any REST API calls that were executed.

Which OCI feature should you use?

Show Answer Hide Answer
Correct Answer: A

Question No. 4

Within OCI IAM identity domains, the AD Bridge component serves a critical role. How does the AD Bridge functionality specifically enhance Identity and Access Management (IAM) practices?

Show Answer Hide Answer
Correct Answer: A

Question No. 5

SIMULATION

Task 2: Create a Compute Instance and Install the Web Server

Create a compute instance, where:

Name: PBT-CERT-VM-01

Image: Oracle Linux 8

Shape: VM.Standard.A1.Flex

Subnet: Compute-Subnet-PBT-CERT

Install and configure Apache web server:

a.

Install Apache

sudo yum -y install httpd

b.

Enable and start Apache

sudo systemctl enable httpd

sudo systemctl restart httpd

2. Install and configure Apache web server:

a. Install Apache

sudo yum -y install httpd

b. Enable and start Apache

sudo systemctl enable httpd

sudo systemctl restart httpd

c. Configure firewall to allow HTTP traffic (port 80)

sudo firewall-cmd --permanent --add-port=80/tcp

sudo firewall-cmd --reload

d. Create an index.html file

sudo bash -c 'echo You are visiting Web Server 1 >> /var/www/html/index.html'

Enter the OCID of the created compute instance PBT-CERT-VM-01 in the text box below.

Show Answer Hide Answer
Correct Answer: A

Task 2: Create a Compute Instance and Install the Web Server

Step 1: Create the Compute Instance

Log in to the OCI Console.

Navigate to Compute > Instances.

Click Create Instance.

Enter the following details:

Name: PBT-CERT-VM-01

Compartment: Select your assigned compartment.

Placement: Leave as default or select an availability domain (e.g., Availability Domain 1).

Image: Click Change Image, select Oracle Linux 8, and confirm.

Shape: Click Change Shape, select VM.Standard.A1.Flex, and configure:

OCPUs: 1 (or adjust as needed)

Memory: 6 GB (or adjust as needed)

Networking:

Virtual Cloud Network: Select PBT-CERT-VCN-01.

Subnet: Select Compute-Subnet-PBT-CERT.

Leave public IP assignment enabled for internet access.

SSH Key: Provide your public SSH key (upload or paste) for secure access.

Click Create and wait for the instance to be provisioned.

Step 2: Connect to the Compute Instance

Once the instance is created, note the Public IP Address from the instance details page.

Use an SSH client to connect:

Command: ssh -i opc@

Replace with your private key path and with the instance's public IP.

Step 3: Install and Configure Apache Web Server

Install Apache:

Run: sudo yum -y install httpd

Enable and Start Apache:

Run: sudo systemctl enable httpd

Run: sudo systemctl restart httpd

Configure Firewall to Allow HTTP Traffic (Port 80):

Run: sudo firewall-cmd --permanent --add-port=80/tcp

Run: sudo firewall-cmd --reload

Create an index.html File:

Run: sudo bash -c 'echo 'You are visiting Web Server 1' >> /var/www/html/index.html'

Step 4: Verify the Configuration

Open a web browser and enter http:// to ensure the page displays 'You are visiting Web Server 1'.

If needed, troubleshoot by checking Apache status: sudo systemctl status httpd.

Step 5: Retrieve and Enter the OCID

Go to the instance details page for PBT-CERT-VM-01 under Compute > Instances.

Copy the OCID (a long string starting with ocid1.instance., unique to your tenancy).

Enter the copied OCID exactly as it appears into the text box provided.

Notes

These steps are based on OCI Compute documentation and Oracle Linux 8 setup guides.

Ensure the security list PBT-CERT-CS-SL-01 allows inbound traffic on port 22 (SSH) and port 80 (HTTP) if not already configured.

The OCID will be unique to your instance; obtain it from the OCI Console after creation


Get All 36 Questions Explore Other Oracle Exams