- Exam Code: 1z0-1104-25
- Exam Name: Oracle Cloud Infrastructure 2025 Security Professional
- Updated: Sep 13, 2026
- Q & A: 39 Questions and Answers
Oracle 1z0-1104-25 actual dump : Oracle Cloud Infrastructure 2025 Security Professional
PDF Version DemoAbout Oracle 1z0-1104-25 Exam Questions
PDF, desktop test engine, or online test engine — Actual4Dumps lets you prepare for the Oracle Cloud Infrastructure 2025 Security Professional whichever way fits your routine. All three formats cover the same 39 practice questions written for the 2026 1z0-1104-25 syllabus.
Oracle 1z0-1104-25 Exam Overview:
| Certification Vendor: | Oracle |
|---|---|
| Exam Name: | Oracle Cloud Infrastructure 2025 Security Professional |
| Exam Number: | 1Z0-1104-25 |
| Real Exam Qty: | Performance-based and multiple-choice |
| Exam Duration: | 90-120 |
| Related Certifications: | Oracle Cloud Infrastructure 2025 Certified Security Professional |
| Certificate Validity Period: | 2 years |
| Available Languages: | English |
| Exam Format: | Multiple Choice, Hands-on Performance Based |
| Passing Score: | 65% |
| Exam Price: | $245 USD |
| Sample Questions: |  |
| Exam Way: | Online proctored exam via Pearson VUE |
| Pre Condition: | No formal prerequisite. Oracle recommends experience with OCI security services and cloud security concepts. |
| Official Syllabus URL: | https://education.oracle.com/oracle-cloud-infrastructure-2025-security-professional/pexam_1Z0-1104-25 |
Oracle 1z0-1104-25 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Improve Cloud Security Posture | - Monitor and enforce security posture
|
| Protect Infrastructure and Applications | - Secure OCI network and workloads
|
| OCI Security Introduction | - Understand OCI shared responsibility model
|
| Implement Identity and Access Management | - Manage IAM resources
|
| Protect Data | - Secure OCI data services
|
| Manage Security Operations | - Operate and monitor OCI security
|
1z0-1104-25 Exam FAQ: Answers to Read Before You Book
The Oracle Cloud Infrastructure 2025 Security Professional is the official Oracle exam that leads to the Oracle Cloud Infrastructure certification at the Professional level. Passing it validates your skills against Oracle standards and proves your qualification to current and future employers. The credential is also connected with related certifications such as Oracle Cloud Infrastructure 2025 Certified Security Professional, so it can serve as a solid step in a broader certification path.
The 1z0-1104-25 exam has Performance-based and multiple-choice questions in total and must be completed within 90-120. That leaves only a narrow time budget per item, so train yourself to flag a difficult question, move on, and circle back later instead of getting stuck. A week or two before your test date, run at least one full timed mock exam in the Actual4Dumps desktop or online test engine under the same 90-120 limit, and repeat until you can finish with a few minutes left for review.
The passing score for the 1z0-1104-25 exam is 65%, and the official registration fee is $245 USD. Keep in mind that a failed attempt is not discounted — retaking the exam means paying the full fee again — so it is wise not to book your seat until your practice scores sit comfortably above the passing mark. Working through the 39 questions at Actual4Dumps in timed mode is a reliable way to judge when you are truly ready.
Oracle sets the following requirement for the 1z0-1104-25 exam: No formal prerequisite. Oracle recommends experience with OCI security services and cloud security concepts.. Eligibility rules can change from time to time, so always confirm the current prerequisites on the official exam page at https://education.oracle.com/oracle-cloud-infrastructure-2025-security-professional/pexam_1Z0-1104-25 before you register.
Yes. Actual4Dumps offers a free PDF demo for the Oracle Cloud Infrastructure 2025 Security Professional, so you can review real sample questions and judge the quality before paying anything. After your purchase, you receive 365 days of free updates — whenever the question pool changes, you get the latest version at no cost. Once that period expires, you can extend your update service at a 50% discount from your member zone.
If you take the 1z0-1104-25 exam within 60 days of your purchase and do not pass, you can apply for a full refund under our 100% Money Back Guarantee. To qualify, submit a scanned copy of your exam enrollment slip together with your official Score Report (PDF) within 2 days after the exam date, and your claim will be processed within 7 days. Note that the guarantee applies only to the corresponding exam: attempts taken within 3 days of purchase, downloaded-but-unused materials, free resources, and expired orders are not eligible, and the candidate name must match the purchaser name. If you would rather not refund, you can exchange the product for two free exam products of equal value while keeping the update service on your original purchase.
Delivery is instant: your files are available to download right after payment and are also sent to your email within one minute. If nothing arrives within 2 hours, contact our support team (and check your spam folder first). There is no limit on the number of computers you can install the product on.
The Oracle Cloud Infrastructure 2025 Security Professional is organized into 6 domains. Among the first ones are OCI Security Introduction, Implement Identity and Access Management, Manage Security Operations, and the remaining domains cover the rest of the official objectives. For the complete topic breakdown with every subtopic, see the full 1z0-1104-25 exam outline above on this page.
Oracle Cloud Infrastructure 2025 Security Professional Sample Questions:
Question #1
"You are designing a secure access strategy for compute instances deployed within a private subnet of an OCI Virtual Cloud Network (VCN). Your security policy requires that no compute instances in the private subnet should have direct Internet access, and administrative access should be controlled.
Which statement best describes the role of an OCI Bastion in securing access to these private compute instances?
- A. It provides a direct public endpoint for the compute instance, enabling remote access.
- B. It acts as a firewall, blocking any external access to the private compute instance.
- C. It creates a secure, publicly accessible entry point to access target resources in a private subnet."
- D. It serves as a secondary authentication point, verifying user credentials before granting access to the compute instance.
Correct Answer: C 🗳️
Question #2
Task 5: Create a Certificate
Create a certificate, where:
Certificate name: PBT-CERT-01-<username>
For example, if your username is 99008677-lab.user01, then the certificate name should be PBT-CERT-
01990086771abuser01
Ensure you eliminate special characters from the user name.
Common name: PBT-CERT-OCICERT-01
Certificate Authority: PBT-CERT-CA-01 (created in the previous task)
Correct Answer:
See the solution below in Explanation.
Explanation:
Since I can't create resources or retrieve OCIDs directly in your OCI environment, I'll provide a step-by-step solution based on verified OCI documentation and best practices as of 02:30 PM BST on Thursday, June 12,
2025. Follow these instructions precisely in the OCI Console or CLI, using the preconfigured PBI_Vault_SP vault and the PBT-CERT-CA-01<username> Certificate Authority created in the previous task. Replace
<username> with your actual username (e.g., 99008677-lab.user01), ensuring special characters are removed.
Task 5: Create a Certificate
Step 1: Access the OCI Vault
* Log in to the OCI Console.
* Navigate toIdentity & Security>Vault.
* Select the root compartment.
* Locate and click on the vault named PBI_Vault_SP.
Step 2: Create the Certificate
* In the PBI_Vault_SP vault details page, underResources, clickCertificates.
* ClickCreate Certificate.
* Enter the following details:
* Name: Replace <username> with your username (e.g., if your username is 99008677-lab.user01, remove special characters like - and . to get 99008677labuser01, then use PBT-CERT-
0199008677labuser01).
* Common Name: Enter PBT-CERT-OCICERT-01.
* Certificate Authority: Select the PBT-CERT-CA-01<username> CA created in Task 4 (e.g., PBT-CERT-CA-0199008677labuser01).
* Subject: Leave as default or adjust (e.g., Organization, Country) if required.
* Validity Period: Set as needed (e.g., 1 year), or use the default.
* Compartment: Ensure it's set to the root compartment.
* ClickCreate Certificateand wait for the certificate to be issued.
Step 3: Verify the Certificate
* After creation, go to theCertificatessection under PBI_Vault_SP.
* Confirm the certificate PBT-CERT-01<username> (e.g., PBT-CERT-0199008677labuser01) is listed and its status is active.
Question #3
"A programmer is developing a Node.js application which will run on a Linux server on their on-premises data center. This application will access various Oracle Cloud Infrastructure (OCI) services using OCI SDKs.
What is the secure way to access OCI services with OCI Identity and Access Management (IAM)?
- A. Create a new OCI IAM user, add the user to a group associated with a policy that grants the desired permissions to OCI services. In the on-premises Linux server, add the user name and password to a file used by Node.js authentication.
- B. Create a new OCI IAM user, add the user to a group associated with a policy that grants the desired permissions to OCI services. In the on-premises Linux server, generate the keypair used for signing API requests and upload the public key to the IAM user.
- C. Create a new OCI IAM user associated with a dynamic group and a policy that grants the desired permissions to OCI services. Add the on-premises Linux server in the dynamic group.
- D. Create an OCI IAM policy with appropriate permissions to access the required OCI services and assign the policy to the on-premises Linux server."
Correct Answer: B 🗳️
Question #4
Challenge 1 - Task 1
Integrate TLS Certificate Issued by the OCI Certificates Service with Load Balancer You are a cloud engineer at a tech company that is migrating its services to Oracle Cloud Infrastructure (OCI). You are required to set up secure communication for your web application using OCI's Certificate service. You need to create a Certificate Authority (CA), issue a TLS/SSL server certificate, and configure a load balancer to use this certificate to ensure encrypted traffic between clients and the backend servers.
Review the architecture diagram, which outlines the resources you'll need to address the requirement.
Preconfigured
To complete this requirement, you are provided with the following:
Access to an OCI tenancy, an assigned compartment, and OCI credentials
Required IAM policies
OCI Vault to store the secret required by the program, which is created in the root compartment as PBI_Vault_SP Task 1: Create and Configure a Virtual Cloud Network (VCN) Create a Virtual Cloud Network (VCN) namedPBT-CERT-VCN-01with the following specifications:
* VCN with a CIDR block of 10.0.0.0/16
* Subnet 1 (Compute Instance):
* Name:Compute-Subnet-PBT-CERT
* CIDR Block:10.0.1.0/24
Subnet 2 (Load Balancer):
* Name:LB-Subnet-PBT-CERT-SNET-02
* CIDR Block:10.0.2.0/24
Internet Gatewayfor external connectivity
Route table and security lists:
* Security List namedPBT-CERT-CS-SL-01for Subnet 1 (Compute-Subnet-PBT-CERT) to allow SSH (port 22) traffic
* Security List namedPBT-CERT-LB-SL-01for Subnet 2 (LB-Subnet-PBT-CERT) to allow HTTPS (port 443) traffic
"Enter the OCID of the created VCN in the text box below.
Correct Answer:
See the solution below in Explanation.
Explanation:
Challenge 1: Integrate TLS Certificate Issued by the OCI Certificates Service with Load Balancer Task 1: Create and Configure a Virtual Cloud Network (VCN) Step 1: Create the Virtual Cloud Network (VCN)
* Log in to the OCI Console.
* Navigate toNetworking>Virtual Cloud Networks.
* ClickCreate Virtual Cloud Network.
* SelectVCN with Internet Connectivity(to include an Internet Gateway by default).
* Enter the following details:
* Name: PBT-CERT-VCN-01
* Compartment: Select your assigned compartment.
* VCN CIDR Block: 10.0.0.0/16
* Leave other settings as default (e.g., create a new public subnet and route table).
* ClickCreate Virtual Cloud Network. Wait for the VCN to be created.
Step 2: Create Subnet 1 (Compute-Subnet-PBT-CERT)
* In the VCN details page for PBT-CERT-VCN-01, clickSubnetsunderResources.
* ClickCreate Subnet.
* Enter the following details:
* Name: Compute-Subnet-PBT-CERT
* Subnet Type: Regional
* CIDR Block: 10.0.1.0/24
* Route Table: Select the default route table created with the VCN.
* Subnet Access: Public Subnet (to allow internet access).
* DNS Resolution: Enabled.
* ClickCreate.
Step 3: Create Subnet 2 (LB-Subnet-PBT-CERT-SNET-02)
* In the VCN details page, clickSubnetsunderResources.
* ClickCreate Subnet.
* Enter the following details:
* Name: LB-Subnet-PBT-CERT-SNET-02
* Subnet Type: Regional
* CIDR Block: 10.0.2.0/24
* Route Table: Select the default route table created with the VCN.
* Subnet Access: Public Subnet (to allow internet access for the load balancer).
* DNS Resolution: Enabled.
* ClickCreate.
Step 4: Verify Internet Gateway
* In the VCN details page, underResources, clickInternet Gateways.
* Ensure an Internet Gateway is listed and attached to PBT-CERT-VCN-01. If not created, clickCreate Internet Gateway, name it (e.g., PBT-CERT-IGW), and attach it.
Step 5: Configure Route Table
* In the VCN details page, underResources, clickRoute Tables.
* Select the default route table or create a new one named PBT-CERT-RT-01.
* ClickAdd Route Rule. 4 -Destination CIDR Block: 0.0.0.0/0
* Target Type: Internet Gateway
* Target: Select the Internet Gateway created (e.g., PBT-CERT-IGW).
* ClickAdd Route Ruleand save.
Step 6: Create Security List for Subnet 1 (Compute-Subnet-PBT-CERT)
* In the VCN details page, underResources, clickSecurity Lists.
* ClickCreate Security List.
* Enter the following:
* Name: PBT-CERT-CS-SL-01
* Compartment: Your assigned compartment.
* Add the following ingress rule:
* Source CIDR: 0.0.0.0/0 (allow from any source, adjust as per security needs)
* IP Protocol: TCP
* Source Port Range: All
* Destination Port Range: 22 (for SSH)
* Allows: Traffic
* ClickCreate.
Step 7: Create Security List for Subnet 2 (LB-Subnet-PBT-CERT-SNET-02)
* In the VCN details page, underResources, clickSecurity Lists.
* ClickCreate Security List.
* Enter the following:
* Name: PBT-CERT-LB-SL-01
* Compartment: Your assigned compartment.
* Add the following ingress rule:
* Source CIDR: 0.0.0.0/0 (allow from any source, adjust as per security needs)
* IP Protocol: TCP
* Source Port Range: All
* Destination Port Range: 443 (for HTTPS)
* Allows: Traffic
* ClickCreate.
Step 8: Retrieve and Enter VCN OCID
* Go to the VCN details page for PBT-CERT-VCN-01.
* Copy theOCIDfrom the VCN information section.
* Enter the OCID in the provided text box.
Over 45369+ Satisfied Customers
Oracle Related Exams Dumps
What Clients Say About Us
Just passed. 98 % score. Thanks to Actual4Dumps. This Oracle 1z0-1104-25 dumps is valid but not complete. Exam guide is 100% valid.
Myrna 
I have passed 1z0-1104-25 before.
Bevis
With your 1z0-1104-25 exam materials,which made me get the 1z0-1104-25 certification more easily.
Ivan
Feedback from David: I have passed this 1z0-1104-25 exam.
Jocelyn 
Really appreciate your help. You guys are doing great. I passed my 1z0-1104-25 exams with the help of your dumps.
Delia 
I got a good score on this subject.It is helpful. Many thanks.
Murphy
I wrote my 1z0-1104-25 exam after using these 1z0-1104-25 training questions and passed. They are good.
Arvin
I never found such a good website Actual4Dumps.
Raymond
This 1z0-1104-25 exam guide is perfect for self-learning. Thanks guys, 1z0-1104-25 exam questions are still valid, passed yesterday!
Gilbert
Pdf exam guide for Oracle 1z0-1104-25 certification are very similar to the original exam. I passed my exam with 91% marks.
Louis
All of the dump 1z0-1104-25 are very helpful to my preparation.
Prima
Passed my exam today the 1z0-1104-25 practice questions are still valid. On top of all that they are reasonably priced.
Steven
I am very excited today for i have passed the exam with your 1z0-1104-25 exam questions. Actual4Dumps, you are so so good. Thank you a lot!
Stacey
QUALITY AND VALUE
Actual4Dumps Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
TESTED AND APPROVED
We are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
EASY TO PASS
If you prepare for the exams using our Actual4Dumps testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
TRY BEFORE BUY
Actual4Dumps offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
Our Clients
