Good tools disappear into your routine. The Oracle Cloud Infrastructure 2025 Security Professional practice material from Real4Prep is designed to facilitate efficient study — 39 practice questions for the 1z0-1104-25 exam, usable on your schedule.
Oracle 1z0-1104-25 Exam Overview:
| Certification Vendor: | Oracle |
|---|---|
| Exam Name: | Oracle Cloud Infrastructure 2025 Security Professional |
| Exam Number: | 1z0-1104-25 |
| Exam Duration: | 90 minutes |
| Certificate Validity Period: | 3 years |
| Passing Score: | 68% |
| Real Exam Qty: | 55 |
| Exam Format: | Scenario-based questions, Multiple Choice, Multiple Response |
| Related Certifications: | Oracle Cloud Infrastructure 2025 Certified Architect Oracle Cloud Infrastructure 2025 Certified Operations Associate |
| Available Languages: | English |
| Exam Price: | USD $245 |
| Recommended Training: | Become a Cloud Security Professional (2025) OCI Security Professional Training |
| Exam Registration: | Oracle University Registration Pearson VUE Scheduling |
| Sample Questions: |  |
| Exam Way: | Online proctored or Onsite at Pearson VUE test centers |
| Pre Condition: | Basic knowledge of cloud computing, OCI fundamentals, security concepts; 6+ months hands-on experience with OCI security recommended |
| Official Syllabus URL: | https://education.oracle.com/oracle-cloud-infrastructure-2024-security-professional/pexam_1Z0-1104-25 |
Oracle 1z0-1104-25 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Security Operations, Monitoring and Compliance | 10% | - Compliance frameworks and governance - Monitoring, Logging, Events and Alerting - Cloud Guard, Security Zones, Security Advisor |
| Topic 2: Data Protection and Encryption | 15% | - Encryption at rest and in transit - OCI Data Safe: data security and assessment - OCI Vault: keys and secrets management |
| Topic 3: Network Security | 25% | - Network Firewall, Web Application Firewall - Certificate management and Load Balancer security - Security Lists, Network Security Groups |
| Topic 4: OCI Security Concepts and Shared Responsibility Model | 10% | - Security design principles - Shared Security Responsibility Model - Core OCI security services overview |
| Topic 5: Identity and Access Management (IAM) | 25% | - IAM domains, users, groups, and compartments - Dynamic Groups, Network Sources, Tag-based access - Multi-factor Authentication, Sign-on policies, alerts - IAM policies and access control |
| Topic 6: Workload and OS Protection | 15% | - OCI Bastion for secure access - OS management and automated updates - Vulnerability scanning for hosts and containers |
1z0-1104-25 Exam FAQ — Effective Preparation
Yes:
Courses build the foundation; then practice smartly with the 39 practice questions for the Oracle Cloud Infrastructure 2025 Security Professional — every answer expert-verified.
The Oracle Cloud Infrastructure 2025 Security Professional is Oracle's certification exam for Oracle Cloud Infrastructure 2025 Security Professional, at the Professional level. It validates skills employers hire for, which is why it can affect your career and future. Related credentials include Oracle Cloud Infrastructure 2025 Certified Architect, Oracle Cloud Infrastructure 2025 Certified Operations Associate.
Files arrive by automatic email within a minute of payment — unlimited installations, and 24/7 customer assisting for any login or downloading issues if nothing shows up within 2 hours. If you fail the corresponding 1z0-1104-25 exam within 60 days of purchase, you have options: a full refund (send a scanned enrollment slip plus the official Score Report PDF within 2 days of the exam; processed within 7 days), waiting for the next updated version free, or changing to two other equal-value dumps free. Excluded: exams within 3 days of purchase, candidate names that don't match the payer, and free or expired products.
Basic knowledge of cloud computing, OCI fundamentals, security concepts; 6+ months hands-on experience with OCI security recommended Vendors revise eligibility rules from time to time, so verify the current requirements on the official page (official 1z0-1104-25 exam page) before booking.
The Oracle Cloud Infrastructure 2025 Security Professional blueprint covers 6 domains — including Network Security (25%), Workload and OS Protection (15%), Identity and Access Management (IAM) (25%). The weightings tell you where to spend your hours; the complete outline above lists every subtopic.
Through the vendor's official registration channels:
The Oracle Cloud Infrastructure 2025 Security Professional is delivered Online proctored or Onsite at Pearson VUE test centers — choose the arrangement that fits you when booking.
USD $245 per attempt, 68% to pass. A retake bills the full fee again, so prepare smartly: work through the 39 practice questions for the 1z0-1104-25 exam at Real4Prep before you book.
90 minutes for 55 questions. Efficient preparation includes pacing: rehearse timed sets until the clock feels manageable, not menacing.
Yes — download the free Oracle Cloud Infrastructure 2025 Security Professional demo and judge the quality before paying. Purchases include 365 days of free updates, with each latest version emailed to you immediately; renew afterward at 50% off.
Oracle Cloud Infrastructure 2025 Security Professional Sample Questions:
You are a security architect at your organization and have noticed an increase in cyberattacks on your applications, including Cross-Site Scripting (XSS) and SQL Injection. To mitigate these threats, you decide to use OCI Web Application Firewall (WAF).
Which type of OCI WAF rule should you configure to protect against these attacks?
- A. Access control rule
- B. Encryption rule
- C. Rate Limiting rule
- D. Protection rule
Correct Answer: D 🗳️
"A programmer is developing a Node.js application which will run on a Linux server on their on-premises data center. This application will access various Oracle Cloud Infrastructure (OCI) services using OCI SDKs.
What is the secure way to access OCI services with OCI Identity and Access Management (IAM)?
- A. Create a new OCI IAM user, add the user to a group associated with a policy that grants the desired permissions to OCI services. In the on-premises Linux server, generate the keypair used for signing API requests and upload the public key to the IAM user.
- B. Create an OCI IAM policy with appropriate permissions to access the required OCI services and assign the policy to the on-premises Linux server."
- C. Create a new OCI IAM user associated with a dynamic group and a policy that grants the desired permissions to OCI services. Add the on-premises Linux server in the dynamic group.
- D. Create a new OCI IAM user, add the user to a group associated with a policy that grants the desired permissions to OCI services. In the on-premises Linux server, add the user name and password to a file used by Node.js authentication.
Correct Answer: A 🗳️
Task 7: Verify the OCI Certificate with Load Balancer
Verify HTTPS connection to the load balancer by running the following command in Cloud Shell curl -k https://<Public IP of PBT-CERT-LB-01> Enter the following URL in the web browser:
https://<Public IP of PBT-CERT-LB-01>
If prompted with a certificate error, accept the risk and continue.
Verify web page content by ensuring the text, "You are visiting Web Server 1" from the index.html file is displayed in the browser See the solution below in Explanation.
Correct Answer:
Task 7: Verify the OCI Certificate with Load Balancer
Step 1: Obtain the Public IP of the Load Balancer
* Log in to the OCI Console.
* Navigate toNetworking>Load Balancers.
* Click on PBT-CERT-LB-01.
* Note thePublic IP Addressfrom the load balancer details page.
Step 2: Verify HTTPS Connection Using Cloud Shell
* Open the OCI Cloud Shell from the top-right corner of the OCI Console.
* Run the following command, replacing <Public IP of PBT-CERT-LB-01> with the public IP you noted:
curl -k https://<Public IP of PBT-CERT-LB-01>
* Expected output: You should see the text "You are visiting Web Server 1" if the connection is successful. The -k flag ignores certificate validation errors (common during initial testing with self- signed or newly issued certificates).
* If you encounter an error, ensure the load balancer is active, the listener is configured correctly, and the backend server (PBT-CERT-VM-01) is reachable.
Step 3: Verify in a Web Browser
* Open a web browser.
* Enter the following URL, replacing <Public IP of PBT-CERT-LB-01> with the public IP you noted:
https://<Public IP of PBT-CERT-LB-01>
* If prompted with a certificate warning (e.g., due to a self-signed certificate or untrusted CA), accept the risk and proceed (click "Advanced" and "Proceed" or similar, depending on your browser).
* Verify that the web page displays the text "You are visiting Web Server 1" from the index.html file created on PBT-CERT-VM-01.
Step 4: Troubleshoot (if needed)
* If the text is not displayed:
* Check the load balancer health status underBackend Sets>Healthin the OCI Console.
* Ensure the security list PBT-CERT-LB-SL-01 allows port 443 and the compute instance security list allows port 80.
* Verify the Apache service is running on PBT-CERT-VM-01 by SSHing in and running sudo systemctl status httpd.
Task 6: Create Load Balancer and Attach Certificate
Create a Load Balancer with the name PBT-CERT-LB-01 in subnet LB-Subnet-PBT-CERT-SNET-02 Create a Listener for the load balancer, where:
Name: PBT-CERT-LB_LTSN_01
Protocol: HTTPS
Port: 443
Attach the certificate PBT-CERT-01-<username> to the load balancer
Attach the security list PBT-CERT-LB-SL-01 to subnet LB-Subnet-PBT-CERT-SNET-02 See the solution below in Explanation.
Correct Answer:
Task 6: Create Load Balancer and Attach Certificate
Step 1: Create the Load Balancer
* Log in to the OCI Console.
* Navigate toNetworking>Load Balancers.
* ClickCreate Load Balancer.
* Enter the following details:
* Name: PBT-CERT-LB-01
* Compartment: Select your assigned compartment.
* Load Balancer Type: SelectPublic.
* Virtual Cloud Network: Select PBT-CERT-VCN-01.
* Subnet: Select LB-Subnet-PBT-CERT-SNET-02.
* Shape: Choose a shape (e.g., 10 Mbps, adjust based on needs).
* ClickNext.
* Leave backend sets and listeners as default for now (we'll configure the listener next).
* ClickCreate Load Balancerand wait for it to be provisioned.
Step 2: Create a Listener
* Once the load balancer is created, go to theLoad Balancerspage and click on PBT-CERT-LB-01.
* UnderResources, clickListeners.
* ClickCreate Listener.
* Enter the following details:
* Name: PBT-CERT-LB_LTSN_01
* Protocol: SelectHTTPS.
* Port: Enter 443.
* Certificate: ClickAdd Certificate, then select the PBT-CERT-01<username> certificate (e.g., PBT-CERT-0199008677labuser01) created in Task 5.
* Leave other settings (e.g., SSL handling) as default unless specified.
* ClickCreate.
Step 3: Configure the Backend Set
* In the PBT-CERT-LB-01 details page, underResources, clickBackend Sets.
* ClickCreate Backend Set(if not already created).
* Enter basic details (e.g., name like PBT-CERT-BS-01).
* Add a backend server:
* IP Address: Use the private IP of PBT-CERT-VM-01 (find this in the instance details under Compute>Instances).
* Port: 80 (HTTP, as configured on the web server).
* Protocol: HTTP.
* ClickCreate.
Step 4: Attach the Security List to the Subnet
* Navigate toNetworking>Virtual Cloud Networks.
* Select PBT-CERT-VCN-01 and clickSubnets.
* Click on LB-Subnet-PBT-CERT-SNET-02.
* UnderSecurity Lists, ensure PBT-CERT-LB-SL-01 is attached. If not:
* ClickEdit.
* Remove the default security list and add PBT-CERT-LB-SL-01.
* ClickSave Changes.
Step 5: Verify the Configuration
* Ensure the load balancer health status is OK (check underBackend Sets>Health).
* Test by accessing https://<load-balancer-public-ip> in a browser (replace with the public IP from the load balancer details).
Viewing page 1 out of 10 pages.
Viewing questions 1-4 out of 39 questions.
