Try Oracle : 1z0-1084-26 valid & accurate questions and answers

Your security operations team wants to analyze application diagnostic and access patterns across both service and custom logs. A new IAM user group named security-auditors has been formed, and members must run advanced ad-hoc queries using the OCI Logging Console Search page to parse through indexed logs in the tenancy. Your company security mandate dictates that they must only be granted the minimum required permissions necessary to successfully execute these search queries and view the results.
Which set of policy statements correctly implements this requirement?

• A. Allow group security-auditors to inspect log-groups in tenancyAllow group security-auditors to inspect log-content in tenancy
• B. Allow group security-auditors to read log-groups in tenancyAllow group security-auditors to use log- content in tenancy
• C. Allow group security-auditors to read log-groups in tenancyAllow group security-auditors to read log- content in tenancy
• D. Allow group security-auditors to manage log-groups in tenancyAllow group security-auditors to use log- content in tenancy

Which configuration parser type is mandatory when setting up a custom log with the OCI Unified Monitoring Agent if no log structure parsing is required?

• A. RAW
• B. UNSTRUCTURED
• C. DEFAULT
• D. NONE

Which statement is NOT valid regarding the configurations and behaviors of Oracle Cloud Infrastructure (OCI) Queue?

• A. The maximum retention period of a message is configurable from 10 seconds to 7 days and cannot be changed after the queue has been created.
• B. The maximum number of delivery attempts before a message is transferred to a dead letter queue is configurable to values from 1 to 20.
• C. The visibility timeout of a message is configurable from 1 second to 12 hours at the queue level and can be extended by a consumer during processing.
• D. The maximum payload size of a single message published to an Oracle Cloud Infrastructure (OCI) Queue can be configured up to 1 MB.

Your development team wants to configure API Gateway request validation to shield an upstream backend microservice from ill-formed API calls. You want to test the validation rules in your staging environment first without blocking any non-compliant client requests, and you want to ensure the gateway checks that a mandatory HTTP header is present. Which TWO configurations should you apply to your API Gateway deployment specification to meet this requirement?

• A. Configure the request validation policy with header validations to mandate the presence of the required HTTP header.
• B. Set the request validation policy mode to Enforcing to forward failed requests to the execution log instead of blocking them.
• C. Set the request validation policy mode to Permissive to log validation failures without rejecting requests.
• D. Create a dynamic group and IAM policy to grant the API Gateway permission to inspect incoming request bodies in real-time.
• E. Use the request.auth[ < key > ] context variable inside a Stock Response backend to log non-compliant headers.

Which statement is NOT valid regarding OCI Identity and Access Management (IAM) policies written for OKE Workload Identity?

• A. The policy subject must be specified as any-user rather than a specific IAM group or dynamic group name.
• B. The policy statement must be scoped strictly at the tenancy level and cannot be written to restrict access to a specific compartment.
• C. The policy condition must explicitly define request.principal.type with the value set to workload.
• D. The policy condition must specify the Kubernetes namespace, service account name, and OKE cluster OCID.