1Z0-1104-25 Question 142
Select 2Your organization is launching a set of new compute instances in Oracle Cloud Infrastructure (OCI). You need to detect operating system vulnerabilities as soon as each instance is created, ensure that misconfigurations are automatically flagged, and continuously monitor compliance with your security standards. Which two actions should you perform to achieve this goal?
- A
Configure a Cloud Guard target that includes the relevant compartments to automatically detect and remediate compute misconfigurations identified by Cloud Guard detectors.
- B
Enable the Vulnerability Scanning Service for your compute instances to detect common vulnerabilities and exposures (CVEs) as soon as they are launched.
- C
Set up Logging Analytics to automatically quarantine any newly created instance if it generates more than 1 GB of logs per day.
- D
Disable Oracle Cloud Agent on all newly launched compute instances to reduce overhead from scanning services.
Show answer and explanation
Correct answers: A, B
Explanation
To detect, remediate, and monitor OCI resources effectively, leveraging native OCI security services and best practices is key. Cloud Guard provides out-of-the-box detectors and optional automated remediation to address configuration issues. The Vulnerability Scanning Service identifies and alerts on common vulnerabilities in your OS and applications for newly launched compute instances. For more details, refer to the Oracle Cloud Infrastructure documentation on Cloud Guard and Vulnerability Scanning.
- A. Correct.
Correct. By configuring Cloud Guard to monitor your compartments, you can automatically detect misconfigurations in newly created or existing compute instances and optionally set up automatic remediation for certain findings, following Oracle best practices.
- B. Correct.
Correct. The Vulnerability Scanning Service can scan newly provisioned instances for known OS vulnerabilities, allowing you to quickly identify and address issues. This aligns with continuous compliance monitoring needs.
- C. Incorrect.
Incorrect. While Logging Analytics is useful for analyzing logs, it is not designed to automatically quarantine instances or detect misconfigurations and vulnerabilities in real time. A large log volume alone does not necessarily indicate a security issue.
- D. Incorrect.
Incorrect. Disabling the Oracle Cloud Agent would prevent you from collecting the necessary metrics and logs, and it would interfere with many security features. Keeping the agent enabled is essential for both monitoring and scanning.