Oracle 1Z0-1104-25 Practice Exam Questions & Answers

Explanation IAM policies grant permissions to groups by specifying which actions they can perform on which resources. The correct syntax uses 'Allow group' followed by the group names and the resource scope. You need to list both groups in a single policy statement to grant them identical permissions on all resources within the TEST compartment. Other options either use incorrect syntax or fail to properly scope the permissions to both groups at once.

Explanation

To provision a compute instance named IAD-SP-PBT-1-VM-01 in the IAD-SP-PBT-PUBSNET-01 public subnet with the specified configuration (Oracle Linux 8 image, VM Standard A1 Flex shape), follow these steps based on the Oracle Cloud Infrastructure (OCI) Compute documentation.

Step-by-Step Solution for Task 5: Provision a Compute Instance

Log in to the OCI Console:

Use your OCI credentials to log in to the OCI Console (https://console.us-ashburn-1.oraclecloud.com).

Ensure you have access to the assigned compartment.

Navigate to Compute Instances:

From the OCI Console, click the navigation menu (hamburger icon) on the top left.

Under Compute, select Instances.

Create a New Compute Instance:

Click the Create Instance button.

Configure the Instance Details:

Name: Enter IAD-SP-PBT-1-VM-01.

Compartment: Select the assigned compartment.

Placement: Choose the availability domain (e.g., AD-1) based on your region's availability.

Select the Image:

Under Image and Shape, click Change Image.

Select Oracle Linux 8 from the platform images list.

Click Select Image.

Choose the Shape:

Click Change Shape.

Select VM Standard category.

Choose A1 Flex from the shape options.

Configure the OCPUs (e.g., 1 OCPU) and memory (e.g., 6 GB) as needed for A1 Flex, then click Select Shape.

Configure Networking:

Under Networking, ensure the Virtual Cloud Network is set to IAD-SP-PBT-VCN-01.

Set the Subnet to IAD-SP-PBT-PUBSNET-01 (public subnet with CIDR 10.0.1.0/24).

Enable Assign a public IPv4 address to allow external connectivity.

Leave the default security list or assign a custom one if configured previously.

Set Up SSH Access:

Under Add SSH Keys, either:

Upload your public SSH key file, or

Paste your public SSH key manually.

This ensures you can access the instance via SSH.

Launch the Instance:

Click Create to provision the compute instance.

Wait for the instance to reach the Running state (this may take a few minutes).

Note the Instance OCID:

Once the instance is running, go to the instance details page for IAD-SP-PBT-1-VM-01.

Copy the OCID displayed (e.g., ocid1.instance.oc1..<unique_string>).

OCID of the Created Compute Instance

Enter the OCID of the created compute instance (IAD-SP-PBT-1-VM-01) into the text box. The exact OCID will be available after Step 9 (e.g., ocid1.instance.oc1..<unique_string>).

Notes

Ensure the security zone IAD_SAP-PBT-CSZ-01 and its associated recipe IAD-SP-PBT-CSP-01 allow compute instance creation in the public subnet (10.0.1.0/24).

Verify network connectivity by testing SSH access using the public IP assigned to the instance.

Explanation

Since I can't create resources or retrieve OCIDs directly in your OCI environment, I'll provide a step-by-step solution based on verified OCI documentation and best practices as of 02:30 PM BST on Thursday, June 12, 2025. Follow these instructions precisely in the OCI Console or CLI, using the preconfigured PBI_Vault_SP vault and the PBT-CERT-CA-01<username> Certificate Authority created in the previous task. Replace <username> with your actual username (e.g., 99008677-lab.user01), ensuring special characters are removed.

Task 5: Create a Certificate

Step 1: Access the OCI Vault

Log in to the OCI Console.

Navigate to Identity & Security > Vault.

Select the root compartment.

Locate and click on the vault named PBI_Vault_SP.

Step 2: Create the Certificate

In the PBI_Vault_SP vault details page, under Resources, click Certificates.

Click Create Certificate.

Enter the following details:

Name: Replace <username> with your username (e.g., if your username is 99008677-lab.user01, remove special characters like - and . to get 99008677labuser01, then use PBT-CERT-0199008677labuser01).

Common Name: Enter PBT-CERT-OCICERT-01.

Certificate Authority: Select the PBT-CERT-CA-01<username> CA created in Task 4 (e.g., PBT-CERT-CA-0199008677labuser01).

Subject: Leave as default or adjust (e.g., Organization, Country) if required.

Validity Period: Set as needed (e.g., 1 year), or use the default.

Compartment: Ensure it's set to the root compartment.

Click Create Certificate and wait for the certificate to be issued.

Step 3: Verify the Certificate

After creation, go to the Certificates section under PBI_Vault_SP.

Confirm the certificate PBT-CERT-01<username> (e.g., PBT-CERT-0199008677labuser01) is listed and its status is active.

Explanation

To create and configure a Virtual Cloud Network (VCN) named IAD-SP-PBT-VCN-01 with an Internet Gateway and appropriate route rules for external connectivity, follow these steps based on the Oracle Cloud Infrastructure (OCI) Networking documentation.

Step-by-Step Solution for Task 3: Create and Configure a VCN and Private Subnet

Log in to the OCI Console:

Use your OCI credentials to log in to the OCI Console (https://console.us-ashburn-1.oraclecloud.com).

Ensure you have access to the assigned compartment.

Navigate to Virtual Cloud Networks:

From the OCI Console, click the navigation menu (hamburger icon) on the top left.

Under Networking, select Virtual Cloud Networks.

Create a New VCN:

Click Start VCN Wizard and select Create VCN with Internet Connectivity.

VCN Name: Enter IAD-SP-PBT-VCN-01.

Compartment: Select the assigned compartment.

VCN CIDR Block: Enter 10.0.0.0/16 (matches the diagram's VCN CIDR).

Public Subnet CIDR Block: Enter 10.0.10.0/24 (matches the diagram's public subnet).

Accept the default settings for the public subnet and Internet Gateway creation.

Click Create to provision the VCN, Internet Gateway, and public subnet.

Verify the Internet Gateway:

After creation, go to the VCN details page for IAD-SP-PBT-VCN-01.

Under Resources, select Internet Gateways.

Ensure the Internet Gateway is attached and enabled.

Configure Route Rules:

In the VCN details page, under Resources, select Route Tables.

Select the default route table associated with the public subnet (10.0.10.0/24).

Click Add Route Rules.

Target Type: Select Internet Gateway.

Destination CIDR Block: Enter 0.0.0.0/0.

Target Internet Gateway: Select the Internet Gateway created with the VCN.

Click Add Route Rule to save.

Update Security List (if needed):

Under Resources, select Security Lists.

Edit the default security list for the public subnet.

Add an ingress rule:

Source CIDR: 0.0.0.0/0

IP Protocol: TCP

Source Port Range: All

Destination Port Range: 22 (for SSH) or as required by your application.

Add an egress rule:

Destination CIDR: 0.0.0.0/0

IP Protocol: All

Save the changes.

Note the VCN OCID:

Return to the VCN details page for IAD-SP-PBT-VCN-01.

Copy the OCID displayed (e.g., ocid1.vcn.oc1..<unique_string>).

OCID of the Created VCN

Enter the OCID of the created VCN (IAD-SP-PBT-VCN-01) into the text box. The exact OCID will be available after Step 3 (e.g., ocid1.vcn.oc1..<unique_string>).

Explanation

Task 3: Create a Master Encryption Key

Step 1: Access the OCI Vault

Log in to the OCI Console.

Navigate to Identity & Security > Vault.

Select the root compartment.

Locate and click on the vault named PBI_Vault_SP.

Step 2: Create the Master Encryption Key

In the PBI_Vault_SP vault details page, under Resources, click Keys.

Click Create Key.

Enter the following details:

Name: Replace <username> with your username (e.g., if your username is 99008677-lab.user01, remove special characters like - and . to get 99008677labuser01, then use PBT-CERT-MEK-0199008677labuser01).

Key Shape: Select RSA with 4096 bits.

Protection Mode: Select HSM (Hardware Security Module) if available, or Software if HSM is not required (based on vault capabilities).

Compartment: Ensure it's set to the root compartment (where PBI_Vault_SP resides).

Leave other settings (e.g., key usage) as default unless specified.

Click Create Key and wait for the key to be generated.

Step 3: Retrieve and Enter the OCID

After the key is created, go to the Keys section under PBI_Vault_SP.

Click on the key named PBT-CERT-MEK-01<username> (e.g., PBT-CERT-MEK-0199008677labuser01).

Copy the OCID (a long string starting with ocid1.key., unique to your tenancy) from the key details page.

Enter the copied OCID exactly as it appears into the provided text box.

Task 4: Create a Certificate Authority (CA)

Create a certificate authority, where:

CA name: PBT-CERT-CA-01-<username>

For example, if your username is 99008677-lab.user01, then the certificate authority name should be PBT-CERT-CA-01990086771abuser01

Ensure you eliminate special characters from the user name.

Common name: PBT-CERT-OCICA-01

Master Encryption Key: PBT-CERT-MEK-01 (created in the previous task)

Task 4: Create a Certificate Authority (CA)

Step 1: Access the OCI Vault

Log in to the OCI Console.

Navigate to Identity & Security > Vault.

Select the root compartment.

Locate and click on the vault named PBI_Vault_SP.

Step 2: Create the Certificate Authority

In the PBI_Vault_SP vault details page, under Resources, click Certificate Authorities.

Click Create Certificate Authority.

Enter the following details:

Name: Replace <username> with your username (e.g., if your username is 99008677-lab.user01, remove special characters like - and . to get 99008677labuser01, then use PBT-CERT-CA-0199008677labuser01).

Common Name: Enter PBT-CERT-OCICA-01.

Master Encryption Key: Select the PBT-CERT-MEK-01<username> key created in Task 3 (e.g., PBT-CERT-MEK-0199008677labuser01).

Subject: Leave as default or adjust (e.g., Organization, Country) if required by your setup.

Validity Period: Set as needed (e.g., 10 years), or use the default.

Compartment: Ensure it's set to the root compartment.

Click Create Certificate Authority and wait for the CA to be provisioned.

Step 3: Verify the Certificate Authority

After creation, go to the Certificate Authorities section under PBI_Vault_SP.

Confirm the CA PBT-CERT-CA-01<username> (e.g., PBT-CERT-CA-0199008677labuser01) is listed and its status is active.

Explanation OCI Events Service rules require two essential components to function properly. Rule Conditions define what events the rule should match based on event attributes and patterns. Actions specify what should happen when those conditions are met, such as invoking a function, sending a notification, or triggering an automation. Without both conditions and actions, the rule cannot evaluate events or respond to them appropriately.