- Exam Code: 1z0-1104-23
- Exam Name: Oracle Cloud Infrastructure 2023 Security Professional
- Updated: Nov 06, 2026
- Q & A: 172 Questions and Answers
Oracle Cloud Infrastructure 2023 Security Professional : 1z0-1104-23 valid dump
PDF Version DemoAbout Oracle 1z0-1104-23Latest exam Dumps
Exams change, and stale materials waste your hours. In 2026, Actual4Dumps experts test and refresh the 1z0-1104-23 content continuously, and every update reaches you free for 365 days after purchase.
Oracle 1z0-1104-23 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Secure Applications and Data | 25% | - Storage security and WAF configuration - Oracle Data Safe and database security - OCI Vault, keys and secrets management - Data protection and encryption |
| OCI Security Introduction | 15% | - Security and compliance frameworks - Shared Security Responsibility Model - OCI core security services overview |
| Implement Network & Infrastructure Security | 20% | - Bastion service and secure access - Virtual cloud network security - Security lists, network security groups - VPN, FastConnect and secure connectivity |
| Improve Cloud Security Posture | 10% | - Security Advisor and Security Zones - Cloud Guard configuration and monitoring - Threat intelligence and risk management |
| Manage Security Operations | 10% | - Logging, monitoring and alerting - Incident response and remediation - Audit and compliance reporting |
| Manage Identity and Access | 20% | - IAM users, groups, compartments and policies - Identity domains and federation - Conditional access and advanced authorization |
Oracle Cloud Infrastructure 2023 Security Professional Exam: Three Versions, One Standard
2+ years of experience designing and implementing security solutions; 6+ months hands-on experience securing OCI workloads; no mandatory prerequisite exams Since requirements change over time, confirm the latest on the official Oracle exam page before scheduling.
Three versions of the same study materials: a printable, expert-prepared PDF with free demo download and instant access; a Desktop Test Engine for Windows with customizable simulation and timed modes that works offline; and an Online Test Engine for any browser on Windows, Mac, Android, and iOS with test history and performance review. All 172 practice questions are identical across versions. Every purchase includes 365 days of free updates, a 50% renewal discount afterward, and unlimited computer installations.
The 1z0-1104-23 exam is a Oracle certification exam validating the Oracle Cloud Infrastructure 2023 Security Professional syllabus shown above. It belongs to these credential paths: Oracle Cloud Infrastructure 2023 Certified Professional. Candidates in 2026 start with Actual4Dumps's 172 practice questions, available as a printable PDF, a Windows Desktop Test Engine, and an Online Test Engine — three versions of the same materials.
Oracle recommends these training resources for the Oracle Cloud Infrastructure 2023 Security Professional exam:
- Become a Cloud Security Professional 2023
- Oracle Cloud Infrastructure Security Professional Learning Subscription
Follow the training with steady self-testing — the 172 practice questions from Actual4Dumps help you apply theory and fill any gaps the training leaves.
The official Oracle Cloud Infrastructure 2023 Security Professional outline defines 6 domains. The leading three are OCI Security Introduction (15%), Implement Network & Infrastructure Security (20%), and Manage Security Operations (10%). The full list is in the topics section above, and Actual4Dumps's 172 practice questions cover each one.
The Oracle Cloud Infrastructure 2023 Security Professional exam contains 55 to complete within 90 minutes. Timed simulation in the Actual4Dumps Desktop Test Engine teaches that rhythm before exam day does.
The Oracle Cloud Infrastructure 2023 Security Professional exam requires 68% to pass, and registration costs USD 245. A failed attempt means paying the same fee again — a readiness check with the Actual4Dumps engines before booking is the cheaper option.
Actual4Dumps issues a full refund if you take the Oracle Cloud Infrastructure 2023 Security Professional exam within 60 days of purchase and do not pass. The policy does not apply if the exam is taken within 3 days of purchase, if the exam was never actually taken, or to free materials or expired orders, and the candidate name must match the payer name. Submit a scan of your enrollment slip and the official Score Report PDF within 2 days of the exam; claims are processed within 7 days. Alternatively, exchange for two free exam products of equal value and keep your original update service. Orders arrive by email within 1 minute — contact support if nothing arrives within 2 hours.
Online proctored or onsite at Pearson VUE test centers Register for the Oracle Cloud Infrastructure 2023 Security Professional exam through these official channels:
After booking, Actual4Dumps delivers your practice questions within 1 minute — preparation starts the same day.
Oracle Cloud Infrastructure 2023 Security Professional Sample Questions:
Question #1
You have configured Management Agent on an Oracle Cloud Infrastructure (OCI) Linux instance for log Ingestion purposes. OR When using Management Agent to collect logs continuously. Which is required configuration for OCI Logging Analytics service to collect data from multiple logs of this Instance? (Choose the best Answer.)
- A. Log Group-Source Association
- B. Entity Log Association
- C. Source-Entity Association
- D. Log-Log Group Association
Correct Answer: C 🗳️
Question #2
Challenge 2
Least-Privileged Model Enforcement Leveraging Custom Security Zones
Scenario
In deploying a new application, a cloud customer needs to reflect different security postures. If a security zone is enabled with the Maximum Security Zone recipe, the customer will be unable to create or update a resource in the Security Zone if the action violates the attached Maximum Security Zone policy.
As an application requirement, the customer requires a compute instance in the public subnet. You, therefore, need to configure Custom Security Zones that allow the creation of compute instances in the public subnet.
To complete this deployment, you have to perform the following tasks in the environment provisioned for you:
* Create a Custom Security Zone recipe to allow compute instances in the public subnet.
* Create a Security Zone using the Custom Security Zone recipe.
* Configure a Virtual Cloud Network (VCN) and Public Subnet.
* Provision a Compute Instance in the public subnet.
Note: You are provided with access to an OCI Tenancy, an assigned compartment, and OCI credentials. Throughout your exam, ensure to use the assigned Compartment 99234021-C01 and Region us-ashburn-1 Complete the following tasks in the provisioned OCI environment:
Create a Custom Recipe with the name
Create a Security Zone with the name
Create a VCN with the name IAD-SP-PBT-VCN-01
Create a Public Subnet with the name IAD-SP-PBT-PUBSNET-01
Create a Compute Instance with the name IAD-SP-PBT-1-VM-01, using the "Oracle Linux 8" image and "VM.Standard2.1" as shape
Correct Answer:
See the solution below in Explanation
Explanation:
SOLUTION:
Task 1: Create a Custom Security Zone recipe that permits the creation of a VCN with a public subnet, Internet Gateway, and a public bucket.
Sign into your Oracle Cloud Infrastructure (OCI) account.
From the navigation menu, click Identity & Security. Navigate to Security Zones and click Recipes.
In the left navigation pane, under Scope, select <your compartment> from the drop-down menu.
Click Create Recipe.
On Create Recipe page, enter the following values:
a. Recipe name: [Your Recipe Name] b. Description: My custom security zone recipe. c. Create for compartment: Select your compartment from the drop-down list. d. Click Next e. Policy type: All f. Resource type: VIRTUALNETWORK g. Uncheck deny public subnets deny internet gateway deny update route table h. Again, go to Resource type and select: OBJECTSTORAGE i. Uncheck deny public bucket deny buckets without vault key. j. On the Review page, review the number of policies that are enabled and disabled in this recipe.
Click create.
Task 2: Use the Custom Security Zone recipe created in Task 1 to create a Security Zone for your assigned compartment.
From the navigation menu, select Identity & Security. Navigate to Security Zones and click Overview.
In the left navigation pane, under Scope, select <your compartment> from the drop-down menu.
Click Create Security Zone.
On the Create Security Zone page, enter the following values: a. Security Zone Recipe: Select Customer-managed to use Custom Security Zone Recipe. b. Select Security Zone Recipe [Your Recipe Name] in the working compartment. c. Name: [Your Security Zone Name] d. Description: My Custom Security Zone. e. Create for compartment: Select the working compartment from the drop-down list.
Click Create Security Zone. The new security zone is in the Creating state. It can take several minutes to associate the working compartment with the security zone. When finished, the security zone is in the Active state.
On the Security Zone information tab, you can view the attached [Your Recipe Name] recipe.
Task 3: Use the VCN wizard to create a VCN and ensure that the Custom Security Zone recipe allows for the creation of a public subnet and Internet Gateway.
From the navigation menu, select Networking, then click Virtual Cloud Network.
In the left navigation pane, under List Scope, select <your compartment> from the drop-down menu.
Click Create VCN.
On the Configuration page, enter the following: a. Name: IAD-SP-PBT-VCN-01 b. IPv4 CIDR Blocks: 10.0.0.0/16 c. Note: Leave all the other options in their default setting.
Click Create VNC.
After Create VNC, click in Create Subnet
On the Configuration page, enter the following: a. Name: IAD-SP-PBT-PUBSNET-01 b. Subnet Type: Regional c. IPv4 CIDR Blocks: 10.0.1.0/24 d. Subnet Access: Public Subnet e. Leave all the other options in their default setting.
Click Create Subnet.
Task 4: Create a Computer Instance
From the navigation menu, select Compute and then click Instances.
Click Create Instance. In the Create Instance dialog box, provide the following details:
Name: IAD-SP-PBT-1-VM-01
Placement: Select AD2.
Image: Oracle Linux 8
Shape: Click Change shape, click on specialty and previous generation and select VM.Standard2.1.
Networking: Pick your IAD-SP-PBT-PUBSNET-01 and Public Subnet.
Public IP address: Assign a Public IPv4 address.
Click create.
Note: After a couple of minutes, you can see that the instance has been successfully created and the status Running.
Question #3
Challenge 1 - Task 3 of 5
Authorize OCI Resources to Retrieve the Secret from the Vault
Scenario
You are working on a Python program running on a compute instance that needs to access an external service. To access the external service, the program needs credentials (password). Given that it is not a best security practice, you decide not to hard code the credential in the program. Instead, you store the password (secret) in a vault using the OCI Vault service. The requirement now is to authorize the compute instance so that the Python program can retrieve the password (secret) by making an API call to the OCI Vault.
Preconfigured
To complete this requirement, you are provided with:
An OCI Vault to store the secret required by the program, which is created in the root compartment as PBT_Vault_SP.
An instance principal IAM service, which enables instances to be authorized actors (principals) that can retrieve the secret from the OCI Vault.
A dynamic group named PBT_Dynamic_Group_SP with permissions to access the OCI Vault. This dynamic group includes all of the instances in your compartment.
Access to Cloud Shell.
Permissions to perform only the tasks within the challenge.
Note: You are provided with access to an OCI Tenancy, an assigned compartment, and OCI credentials. Throughout your exam, ensure to use the assigned Compartment 99234021-C01 and Region us-ashburn-1.
Complete the following task in the OCI environment provisioned:
Create a new VCN with the name PBT_SECRET_VCN01 and public subnet within your assigned compartment.
Correct Answer:
See the solution below in Explanation
Explanation:
SOLUTION:
From the navigation menu, select Networking and then click Virtual Cloud Network.
From the left navigation pane, under List Scope, select your working compartment from the drop-down menu.
Click Start VCN Wizard.
Select Create VCN with Internet Connectivity and click Start VCN Wizard.
On the Configuration page, enter the following:
Name: PBT_SECRET_VCN01
Compartment: your compartment name
Note: Leave all the other options in their default setting.
Click Next.
Verify the details on the Review and Create page.
Click Create to start creating the VCN and its resources.
Click View Virtual Cloud Network to verify the creation of the VCN and its resources.
You can now see that the VCN has been successfully created and is in the Available state, with the following components: VCN, Public subnet, Private subnet, Internet gateway, NAT gateway, Service gateway.
Question #4
You have configured the Management Agent on an Oracle Cloud Infrastructure (OCI) Linux instance for log ingestion purposes.
Which is a required configuration for OCI Logging Analytics service to collect data from multiple logs of this Instance?
- A. Entity - Log Association
- B. Log Group - Source Association
- C. Log - Log Group Association
- D. Source - Entity Association
Correct Answer: D 🗳️
Explanation: Only visible for Actual4Dumps members. You can sign-up / login (it's free).
Question #5
you want to create a stateless rule forSSH in security list and the ingress role has already been properly configured what combination should you use on the engress role what commination should you use on the egress rule?
- A. select tcp for protocol: enter 22 for source port" and 22 for destination port
- B. select udp for protocol: enter 22 for source port" and all for destination port
- C. select tcp for protocol: enter all for source port" and 22 for destination port.
- D. select tcp for protocol: enter 22 for source port" and all for destinationport
Correct Answer: C 🗳️
Explanation: Only visible for Actual4Dumps members. You can sign-up / login (it's free).
Viewing page 1 out of 35 pages.
Viewing questions 1-5 out of 172 questions.
Over 32976+ Satisfied Customers
Oracle Related Exam Questions
What Clients Say About Us
Just know I passed 1z0-1104-23. The 1z0-1104-23 practice test is very useful for me. I failed once. Recommendation!
Oswald 
I had got my certificate for 1z0-1104-23 exam, and now, I recommend t to you, and I hope they can help you.
Renee 
I received the download link and password for 1z0-1104-23 exam dumps within ten minutes, and I really appreciated the efficiency.
Vita
Hey guys, I want to say that I use the 1z0-1104-23 Exam dumps from Actual4Dumps. They are good. I passed using these in the very first attempt.
Eden
I was able to get excellent scores in my 1z0-1104-23 certification exam. It was all due to Actual4Dumps otherwise I would not have been able to learn so much and in extreme depth. A unique experience!
Teresa
The 1z0-1104-23 study guide helped a lot on my way to success and it is a great reference material. I believe you should pass as well
Nancy
Passed today today the dump 1z0-1104-23 from Actual4Dumps helped a lot. some of the questions were not on the dump but the simulations were verbatim. understanding the concepts and how to answer for the ones that were not on the dump
Darren
It is the best 1z0-1104-23 study guide i have ever used! I passed with the Software version of 1z0-1104-23 exam questions which can simulate the real exam as they told. Perfect experience!
Arthur 
When I planned to take exam Oracle 1z0-1104-23 , I was searching for a source that could help me understand the actual requirement of the exam and then provide me guidelines and information for passing
Bblythe
These 1z0-1104-23 exam dumps here are freaking awesome ! They helped me pass the 1z0-1104-23 exam with flying colours! Thanks so much!
David
QUALITY AND VALUE
Actual4Dumps Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
TESTED AND APPROVED
We are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
EASY TO PASS
If you prepare for the exams using our Actual4Dumps testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
TRY BEFORE BUY
Actual4Dumps offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
Our Clients
