1Z0-1104 Practice Test

1Z0-1104 practice test: what's covered

• OCI IAM
• Network Security
• Data Protection
• Cloud Guard
• Audit
• Monitoring

Free 1Z0-1104 sample questions

1. An OCI security engineer is validating oci security architecture for OCI Security Professional and must apply the shared security responsibility model correctly. Which response is the BEST fit?

   • A. Map customer and Oracle responsibilities before assigning security controls to teams
   • B. Assume Oracle manages all workload identities and data access
   • C. Place every resource in the root compartment for easier administration
   • D. Depend on one network control as the complete security model
   Show answer

   Correct: A. Map customer and Oracle responsibilities before assigning security controls to teams is the best answer because OCI security design starts with shared responsibility, tenancy structure, defense in depth and service selection. The other choices do not fit the scenario: Assume Oracle manages all workload identities and data access addresses the wrong layer or timing, Place every resource in the root compartment for easier administration skips a required control, and Depend on one network control as the complete security model would create avoidable operational or security risk.

2. During a production rollout, an oci security engineer needs to handle a regulated workload moving into multiple OCI compartments without weakening oci security architecture. Which response is the BEST fit?

   • A. Design compartments, policies and guardrails around workload and governance boundaries
   • B. Place every resource in the root compartment for easier administration
   • C. Depend on one network control as the complete security model
   • D. Skip architecture review because OCI services are secure by default
   Show answer

   Correct: A. Design compartments, policies and guardrails around workload and governance boundaries is the best answer because OCI security design starts with shared responsibility, tenancy structure, defense in depth and service selection. The other choices do not fit the scenario: Place every resource in the root compartment for easier administration addresses the wrong layer or timing, Depend on one network control as the complete security model skips a required control, and Skip architecture review because OCI services are secure by default would create avoidable operational or security risk.

3. A review board asks for two actions that support apply the shared security responsibility model correctly while reducing misplaced security ownership between Oracle and the customer. Which TWO choices should the engineer select? (Choose TWO)

   • A. Map customer and Oracle responsibilities before assigning security controls to teams
   • B. Apply defense-in-depth across identity, network, data and monitoring layers
   • C. Assume Oracle manages all workload identities and data access
   • D. Skip architecture review because OCI services are secure by default
   Show answer

   Correct: A and B. Map customer and Oracle responsibilities before assigning security controls to teams and Apply defense-in-depth across identity, network, data and monitoring layers are correct because OCI security design starts with shared responsibility, tenancy structure, defense in depth and service selection. The distractors do not satisfy the requirement: Assume Oracle manages all workload identities and data access is incomplete for this case, and Skip architecture review because OCI services are secure by default solves a different problem or weakens the design.

4. An audit finding shows misplaced security ownership between Oracle and the customer in oci security architecture for a regulated production environment. Which response is the BEST fit?

   • A. Apply defense-in-depth across identity, network, data and monitoring layers
   • B. Depend on one network control as the complete security model
   • C. Skip architecture review because OCI services are secure by default
   • D. Assume Oracle manages all workload identities and data access
   Show answer

   Correct: A. Apply defense-in-depth across identity, network, data and monitoring layers is the best answer because OCI security design starts with shared responsibility, tenancy structure, defense in depth and service selection. The other choices do not fit the scenario: Depend on one network control as the complete security model addresses the wrong layer or timing, Skip architecture review because OCI services are secure by default skips a required control, and Assume Oracle manages all workload identities and data access would create avoidable operational or security risk.

5. A team is preparing a change window for oci security architecture and needs defensible evidence for exam-style review. Which response is the BEST fit?

   • A. Use Oracle security guidance and service capabilities to validate the target architecture
   • B. Skip architecture review because OCI services are secure by default
   • C. Assume Oracle manages all workload identities and data access
   • D. Place every resource in the root compartment for easier administration
   Show answer

   Correct: A. Use Oracle security guidance and service capabilities to validate the target architecture is the best answer because OCI security design starts with shared responsibility, tenancy structure, defense in depth and service selection. The other choices do not fit the scenario: Skip architecture review because OCI services are secure by default addresses the wrong layer or timing, Assume Oracle manages all workload identities and data access skips a required control, and Place every resource in the root compartment for easier administration would create avoidable operational or security risk.

Last updated: 2026-10-19

1Z0-1104 practice test FAQ