Today, the Oracle 1z0-1104-23 exam is one of the most taken certification tests in IT — and the certificate it awards is a passport to better jobs and better futures. ITExamDownload gets you there with 172 practice questions for the 1z0-1104-23 exam, written by IT experts who devote themselves to the craft.
Oracle 1z0-1104-23 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Topic 1: Identity and Access Management (IAM) | - Policies and Dynamic Groups - Users, Groups, and Compartments - Federation and Identity Providers |
| Topic 2: Monitoring, Logging, and Security Operations | - Audit Service - SIEM Integration - Logging and Monitoring |
| Topic 3: Data Protection and Encryption | - Encryption at Rest and in Transit - Oracle Vault and Key Management - Secrets Management |
| Topic 4: Network Security | - VCN Security Architecture - Security Lists and Network Security Groups - Web Application Firewall (WAF) |
| Topic 5: Security Services in Oracle Cloud Infrastructure | - Security Zones - Vulnerability Scanning Service - Oracle Cloud Guard |
1z0-1104-23 Exam FAQ: The Questions We Hear Most
Recommended: Oracle Cloud Infrastructure Security Associate level knowledge or equivalent cloud security experience. These requirements are set by Oracle and can change, so confirm the current rules on the official exam page: https://education.oracle.com before registering for the Oracle Cloud Infrastructure 2023 Security Professional exam.
Delivery is instant: your 1z0-1104-23 product is emailed within one minute of payment — download the attachment and start. If nothing arrives within 2 hours, check spam and contact support for an immediate resend. On failure: sit the corresponding 1z0-1104-23 exam within 60 days of purchase, submit a scanned enrollment slip and the official Score Report PDF within 2 days after the exam, and the refund completes within 7 days. The policy covers the corresponding exam only; attempts within 3 days of purchase, exams never actually taken, free materials, and expired orders are excluded, and the candidate name must match the payer name. If you prefer, exchange your product for two free exam products of equal value and keep the update service on the original.
Registration runs through Oracle's official channels:
The exam is delivered via Online proctored or onsite test center exam, so pick the option that fits you when booking.
The Oracle Cloud Infrastructure 2023 Security Professional exam contains 50-60 questions within 90 minutes. The ratio is the real challenge — content alone does not finish the exam, pacing does. Run full timed sessions in the ITExamDownload test engine until finishing early feels normal on the real 1z0-1104-23 exam.
These are the vendor's recommended training options:
Training builds the theory; the 172 practice questions for the 1z0-1104-23 exam from ITExamDownload test it under real exam conditions.
Oracle spreads the Oracle Cloud Infrastructure 2023 Security Professional syllabus over 5 areas, led by Data Protection and Encryption, Security Services in Oracle Cloud Infrastructure, Monitoring, Logging, and Security Operations. Study proportionally to those shares — the complete outline is in the section above this page.
The 1z0-1104-23 exam is Oracle's official certification test — passing it earns the Oracle Cloud Infrastructure 2023 Security Professional credential at the Professional level. It measures practical IT ability objectively, which is why employers treat the Oracle Cloud Infrastructure 2023 Security Professional certificate as a reliable signal — and why candidate numbers keep growing. It also relates to Oracle Cloud Infrastructure Foundations Associate, Oracle Cloud Infrastructure Architect Associate, Oracle Cloud Infrastructure Security Associate, extending its value further.
Each Oracle Cloud Infrastructure 2023 Security Professional attempt costs USD 245, with 68% as the pass mark. A retake charges the full fee again, so the smart move is arriving overprepared. Practice with ITExamDownload until your timed mock scores clear 68% comfortably, then book the 1z0-1104-23 exam once.
Yes — ITExamDownload offers a free demo of the Oracle Cloud Infrastructure 2023 Security Professional questions, including a part of the material, so you can download and judge before you decide. After purchase, 365 days of free updates are included; once the year ends, extend the update service at a 50% discount from your member zone.
Oracle Cloud Infrastructure 2023 Security Professional Sample Questions:
Which type of file system does file storage use?
- A. iSCSI
- B. SSD
- C. NVMe
- D. NFSv3
- E. Paravirtualized
Correct Answer: D 🗳️
Explanation: Only visible for ITExamDownload members. You can sign-up / login (it's free).
Challenge 1 - Task 1 of 5
Authorize OCI Resources to Retrieve the Secret from the Vault
Scenario:
You are working on a Python program running on a compute instance that needs to access an external service. To access the external service, the program needs credentials (password). Given that it is not a best security practice, you decide not to hard code the credential in the program. Instead, you store the password (secret) in a vault using the OCI Vault service. The requirement now is to authorize the compute instance so that the Python program can retrieve the password (secret) by making an API call to the OCI Vault.
Preconfigured:
To complete this requirement, you are provided with:
An OCI Vault to store the secret required by the program, which is created in the root compartment as PBT_Vault_SP.
An instance principal IAM service, which enables instances to be authorized actors (principals) that can retrieve the secret from the OCI Vault.
A dynamic group named PBT_Dynamic_Group_SP with permissions to access the OCI Vault. This dynamic group includes all of the instances in your compartment.
Access to Cloud Shell.
Permissions to perform only the tasks within the challenge.
Note: You are provided with access to an OCI Tenancy, an assigned compartment, and OCI credentials. Throughout your exam, ensure to use the assigned Compartment 99234021-C01 and Region us-ashburn-1.
Complete the following tasks in the OCI environment provisioned:
Create Master Encryption Key with the name my_pbt_msk with 256 bits shape.
Create a Secret with the name my-pbt-secret_99234021-lab.user01 and secret content.
For example: If your user name is 99346163-lab.user02, then the secret should be named as my-pbt-secret_99346163-lab.user02.
Correct Answer:
See the solution below in Explanation
Explanation:
SOLUTION:
From the navigation menu, select "Identity & Security" and then click "Vault." From the left navigation pane, under "List Scope," select the working compartment from the "Compartment" drop-down menu.
Select "PBT_Vault_SP."
From the left navigation pane under "Resources," click "Master Encryption Keys," and then click "Create Key." On the "Create Key" page, enter the following details:
Create in compartment: <your working compartment>
Protection Mode: HSM
Name: my_pbt_msk
Key Shape: Algorithm (Accept the default values)
Key Shape: Length (256 bits)
Click "Create Key" to save. "It will take about a minute to create the master encryption key. The keys will go through the Creating state to the Active state." From the left navigation pane under "Resources," select "Secrets" and click "Create Secret." On the "Create Secret" page, enter the following details:
Create in compartment: <your working compartment>
Name: my-pbt-secret_99234021-lab.user01
Description: "My application secret key"
Encryption Key: Select the my_pbt_msk key created earlier.
Secret Contents: <Your secret here>
Click "Create Secret."
After the secret is created, click "my-pbt-secret_99234021-lab.user01." Click the "Copy" link located to the right of the Secret Key's OCID value. Later, it will be included in a Python script. "Sample: ocid1.vaultsecret.oc1.iad.XXXXXXXXXXXXXXXXXXXXXXXXXXXX"
Which volume type contains the image used to boot a compute instance?
- A. Init 6 volume
- B. Block volume
- C. Startup volume
- D. Boot volume
Correct Answer: D 🗳️
Explanation: Only visible for ITExamDownload members. You can sign-up / login (it's free).
What would you use to make Oracle Cloud Infrastructure Identity and Access Management govern resources in a tenancy?
- A. Policies
- B. Users
- C. Groups
- D. Dynamic groups
Correct Answer: A 🗳️
Explanation: Only visible for ITExamDownload members. You can sign-up / login (it's free).
Which two are monitored by Cloud Guard in OCI, which can help with the overall security posture? (Choose two.)
- A. prevents you from creating misconfigurations on your resources in OCI
- B. masks sensitive data and monitors security controls on your Databases
- C. monitors user activity that can be unauthorized or suspicious
- D. helps detects misconfigured resources, such as publicly accessible storage buckets, in-stances, and restricted ports on security lists
Correct Answer: C,D 🗳️
Viewing page 1 out of 35 pages.
Viewing questions 1-5 out of 172 questions.



