- 36 Actual Exam Questions
- Compatible with all Devices
- Printable Format
- No Download Limits
- 90 Days Free Updates
Get All Oracle Cloud Infrastructure 2025 Security Professional Exam Questions with Validated Answers
| Vendor: | Oracle |
|---|---|
| Exam Code: | 1Z0-1104-25 |
| Exam Name: | Oracle Cloud Infrastructure 2025 Security Professional |
| Exam Questions: | 36 |
| Last Updated: | May 25, 2026 |
| Related Certifications: | Oracle Cloud , Oracle Cloud Infrastructure |
| Exam Tags: | Expert or Advanced Level Oracle Cloud EngineersOracle Cloud Security Professionals |
Looking for a hassle-free way to pass the Oracle Cloud Infrastructure 2025 Security Professional exam? DumpsProvider provides the most reliable Dumps Questions and Answers, designed by Oracle certified experts to help you succeed in record time. Available in both PDF and Online Practice Test formats, our study materials cover every major exam topic, making it possible for you to pass potentially within just one day!
DumpsProvider is a leading provider of high-quality exam dumps, trusted by professionals worldwide. Our Oracle 1Z0-1104-25 exam questions give you the knowledge and confidence needed to succeed on the first attempt.
Train with our Oracle 1Z0-1104-25 exam practice tests, which simulate the actual exam environment. This real-test experience helps you get familiar with the format and timing of the exam, ensuring you're 100% prepared for exam day.
Your success is our commitment! That's why DumpsProvider offers a 100% money-back guarantee. If you don’t pass the Oracle 1Z0-1104-25 exam, we’ll refund your payment within 24 hours no questions asked.
Don’t waste time with unreliable exam prep resources. Get started with DumpsProvider’s Oracle 1Z0-1104-25 exam dumps today and achieve your certification effortlessly!
SIMULATION
Challenge 2 -Task 1
In deploying a new application, a cloud customer needs to reflect different security postures. If a security zone is enabled with the Maximum Security Zone recipe, the customer will be unable to create or update a resource in the security zone if the action violates the attached Maximum Security Zone policy.
As an application requirement, the customer requires a compute instance in the public subnet. You therefore, need to configure Custom Security Zones that allow the creation of compute instances in the public subnet.
Review the architecture diagram, which outlines the resoures you'll need to address the requirement:

Preconfigured
To complete this requirement, you are provided with the following:
Access to an OCI tenancy, an assigned compartment, and OCI credentials
Required IAM policies
Task3: Create and configure a Virtual Cloud Network and Private Subnet
Create and configure virtual cloud Network (VCN) named IAD SP-PBT-VCN-01, with an internet Gateway and configure appropriate route rules to allow external connectivity.
Enter the OCID of the created VCN in the text box below.
To create and configure a Virtual Cloud Network (VCN) named IAD-SP-PBT-VCN-01 with an Internet Gateway and appropriate route rules for external connectivity, follow these steps based on the Oracle Cloud Infrastructure (OCI) Networking documentation.
Step-by-Step Solution for Task 3: Create and Configure a VCN and Private Subnet
Log in to the OCI Console:
Ensure you have access to the assigned compartment.
Navigate to Virtual Cloud Networks:
From the OCI Console, click the navigation menu (hamburger icon) on the top left.
Under Networking, select Virtual Cloud Networks.
Create a New VCN:
Click Start VCN Wizard and select Create VCN with Internet Connectivity.
VCN Name: Enter IAD-SP-PBT-VCN-01.
Compartment: Select the assigned compartment.
VCN CIDR Block: Enter 10.0.0.0/16 (matches the diagram's VCN CIDR).
Public Subnet CIDR Block: Enter 10.0.10.0/24 (matches the diagram's public subnet).
Accept the default settings for the public subnet and Internet Gateway creation.
Click Create to provision the VCN, Internet Gateway, and public subnet.
Verify the Internet Gateway:
After creation, go to the VCN details page for IAD-SP-PBT-VCN-01.
Under Resources, select Internet Gateways.
Ensure the Internet Gateway is attached and enabled.
Configure Route Rules:
In the VCN details page, under Resources, select Route Tables.
Select the default route table associated with the public subnet (10.0.10.0/24).
Click Add Route Rules.
Target Type: Select Internet Gateway.
Destination CIDR Block: Enter 0.0.0.0/0.
Target Internet Gateway: Select the Internet Gateway created with the VCN.
Click Add Route Rule to save.
Update Security List (if needed):
Under Resources, select Security Lists.
Edit the default security list for the public subnet.
Add an ingress rule:
Source CIDR: 0.0.0.0/0
IP Protocol: TCP
Source Port Range: All
Destination Port Range: 22 (for SSH) or as required by your application.
Add an egress rule:
Destination CIDR: 0.0.0.0/0
IP Protocol: All
Save the changes.
Note the VCN OCID:
Return to the VCN details page for IAD-SP-PBT-VCN-01.
Copy the OCID displayed (e.g., ocid1.vcn.oc1..<unique_string>).
OCID of the Created VCN
Enter the OCID of the created VCN (IAD-SP-PBT-VCN-01) into the text box. The exact OCID will be available after Step 3 (e.g., ocid1.vcn.oc1..<unique_string>).
A company is securing its compute instances (VMs and Bare Metal Machines) in Oracle Cloud infrastructure (OCI) using a network firewall. As shown in the diagram, traffic flows from the internet Gateway (IGW) to the firewall in the Public DMZ Subnet, and then to the compute instances in the Public Subnet.

When configuring security lists and network security groups (NSGs) in this setup, what should they consider?
A company has deployed OCI Zero Trust Packet Routing (ZPR) to secure its network. They have two compute instances, VM1-01 and VM-02, in a public subnet. VM-01 is tagged with the security attribute app:vm01, and VM-02 is tagged with app:vm02. The VCN is labeled with network:vcn01, The ZPR policy states:


"What is the expected outcome of this policy?
You are the first responder of a security incident for ABC Org. You have identified several IP addresses and URLs in the logs that you suspect may be related to the incident. However, you need more information to confidently determine whether they are indeed malicious or not.
Which OCI service can you use to obtain a more refined information and confidence score for these identified indicators?
Which Oracle Data Safe feature enables the Internal test, development, and analytics teams to operate effectively while minimizing their exposure to sensitive data?
Security & Privacy
Satisfied Customers
Committed Service
Money Back Guranteed