In 2026, nobody needs another generic question dump. ExamTorrent takes a different approach with the 1z0-1104-25 exam: 39 practice questions checked by experts, an interface designed to stay out of your way, and a written refund policy for candidates who sit the real exam within 60 days and do not pass.
Oracle 1z0-1104-25 Exam Overview:
| Certification Vendor: | Oracle |
|---|---|
| Exam Name: | Oracle Cloud Infrastructure 2025 Security Professional |
| Exam Number: | 1Z0-1104-25 |
| Passing Score: | 65% |
| Exam Format: | Multiple Choice, Hands-on Performance Based |
| Certificate Validity Period: | 2 years |
| Exam Price: | $245 USD |
| Real Exam Qty: | Performance-based and multiple-choice |
| Available Languages: | English |
| Related Certifications: | Oracle Cloud Infrastructure 2025 Certified Security Professional |
| Exam Duration: | 90-120 |
| Sample Questions: |  |
| Exam Way: | Online proctored exam via Pearson VUE |
| Pre Condition: | No formal prerequisite. Oracle recommends experience with OCI security services and cloud security concepts. |
| Official Syllabus URL: | https://education.oracle.com/oracle-cloud-infrastructure-2025-security-professional/pexam_1Z0-1104-25 |
Oracle 1z0-1104-25 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Manage Security Operations | - Operate and monitor OCI security
|
| Protect Infrastructure and Applications | - Secure OCI network and workloads
|
| Protect Data | - Secure OCI data services
|
| Improve Cloud Security Posture | - Monitor and enforce security posture
|
| OCI Security Introduction | - Understand OCI shared responsibility model
|
| Implement Identity and Access Management | - Manage IAM resources
|
Everything Candidates Ask About the Oracle Cloud Infrastructure 2025 Security Professional Exam
Oracle points candidates toward these official training resources for the Oracle Cloud Infrastructure 2025 Security Professional exam:
Coursework builds knowledge, but practice builds confidence — the 39 practice questions from ExamTorrent are the natural next step once the training material is behind you.
The 1z0-1104-25 exam is an official Oracle certification exam built around the Oracle Cloud Infrastructure 2025 Security Professional syllabus detailed above. It counts toward these credential paths: Oracle Cloud Infrastructure 2025 Certified Security Professional. Passing it demonstrates verified, job-relevant skills — one reason Oracle credentials remain widely respected in 2026. ExamTorrent helps you prepare with 39 practice questions available in PDF, Desktop Test Engine, and Online Test Engine formats.
According to the official outline, the Oracle Cloud Infrastructure 2025 Security Professional exam is structured around 6 content domains. The leading three are Manage Security Operations, Protect Infrastructure and Applications, and Improve Cloud Security Posture. The complete list appears in the topics section above, and ExamTorrent's 39 practice questions span every domain in it.
Online proctored exam via Pearson VUE Use these official channels to register for the Oracle Cloud Infrastructure 2025 Security Professional exam:
Once your date is booked, work backward from it with the ExamTorrent practice questions — they arrive by email within 1 minute of purchase.
You need 65% to pass the Oracle Cloud Infrastructure 2025 Security Professional exam, and registration costs $245 USD. A failed attempt means paying that fee a second time, so test yourself with the ExamTorrent engines first — the performance review shows whether you are actually ready to spend it.
Yes — under clear, written conditions. If you take the Oracle Cloud Infrastructure 2025 Security Professional exam within 60 days of purchase and do not pass, ExamTorrent issues a full refund. The policy excludes exams taken within 3 days of purchase, exams never actually taken, free materials, and expired orders, and the candidate name must match the payer name. Send a scan of your enrollment slip and the official Score Report PDF within 2 days of the exam, and your claim is processed within 7 days. If you would rather keep preparing, you can instead exchange for two free exam products of equal value while your original product's update service continues. Delivery after purchase is by email within 1 minute; contact support if nothing arrives within 2 hours.
The Oracle Cloud Infrastructure 2025 Security Professional exam contains Performance-based and multiple-choice with a time limit of 90-120. Budgeting that time is a skill in itself — the timed mock mode in the ExamTorrent Desktop Test Engine lets you rehearse the pace until it feels routine.
No formal prerequisite. Oracle recommends experience with OCI security services and cloud security concepts. Eligibility rules can be updated, so double-check them on the official Oracle exam page before you register.
Three things candidates mention most: coverage, flexibility, and service. You receive 39 practice questions for the Oracle Cloud Infrastructure 2025 Security Professional exam in three formats — a printable expert-prepared PDF, a Windows Desktop Test Engine with two practice modes and offline use, and an Online Test Engine for any browser on Windows, Mac, Android, or iOS with test history and performance review. Install on unlimited computers, try the free demo first, get free updates for 365 days, and renew afterward at 50% off. Small touches matter too: hide the answers while you practice, reveal them when you check your work, and keep notes right where you study.
Oracle Cloud Infrastructure 2025 Security Professional Sample Questions:
Challenge 2
In deploying a new application, a cloud customer needs to reflect different security postures. If a security zone is enabled with the Maximum Security Zone recipe, the customer will be unable to create or update a resource in the security zone if the action violates the attached Maximum Security Zone policy.
As an application requirement, the customer requires a compute instance in the public subnet. You therefore, need to configure Custom Security Zones that allow the creation of compute instances in the public subnet.
Review the architecture diagram, which outlines the resoures you'll need to address the requirement:
Preconfigured
To complete this requirement, you are provided with the following:
Access to an OCI tenancy, an assigned compartment, and OCI credentials
Required IAM policies
Task 5: Provision a Compute Instance
Provision a compute instance in the IAD-SP-PBT-PUBSNET-01 public subnet, where:
Name IAD-SP-PBT-1-VM-01
image: Oracle Linux 8
Shape VM: Standard, A1, Flex
Enter the OCID of the created compute instance in the text box below.
Correct Answer:
See the solution below in Explanation.
Explanation:
To provision a compute instance named IAD-SP-PBT-1-VM-01 in the IAD-SP-PBT-PUBSNET-01 public subnet with the specified configuration (Oracle Linux 8 image, VM Standard A1 Flex shape), follow these steps based on the Oracle Cloud Infrastructure (OCI) Compute documentation.
Step-by-Step Solution for Task 5: Provision a Compute Instance
* Log in to the OCI Console:
* Use your OCI credentials to log in to the OCI Console (https://console.us-ashburn-1.oraclecloud.
com).
* Ensure you have access to the assigned compartment.
* Navigate to Compute Instances:
* From the OCI Console, click the navigation menu (hamburger icon) on the top left.
* UnderCompute, selectInstances.
* Create a New Compute Instance:
* Click theCreate Instancebutton.
* Configure the Instance Details:
* Name:Enter IAD-SP-PBT-1-VM-01.
* Compartment:Select the assigned compartment.
* Placement:Choose the availability domain (e.g., AD-1) based on your region's availability.
* Select the Image:
* UnderImage and Shape, clickChange Image.
* SelectOracle Linux 8from the platform images list.
* ClickSelect Image.
* Choose the Shape:
* ClickChange Shape.
* SelectVM Standardcategory.
* ChooseA1 Flexfrom the shape options.
* Configure the OCPUs (e.g., 1 OCPU) and memory (e.g., 6 GB) as needed for A1 Flex, then click Select Shape.
* Configure Networking:
* UnderNetworking, ensure theVirtual Cloud Networkis set to IAD-SP-PBT-VCN-01.
* Set theSubnetto IAD-SP-PBT-PUBSNET-01 (public subnet with CIDR 10.0.1.0/24).
* EnableAssign a public IPv4 addressto allow external connectivity.
* Leave the default security list or assign a custom one if configured previously.
* Set Up SSH Access:
* UnderAdd SSH Keys, either:
* Upload your public SSH key file, or
* Paste your public SSH key manually.
* This ensures you can access the instance via SSH.
* Launch the Instance:
* ClickCreateto provision the compute instance.
* Wait for the instance to reach theRunningstate (this may take a few minutes).
* Note the Instance OCID:
* Once the instance is running, go to the instance details page for IAD-SP-PBT-1-VM-01.
* Copy theOCIDdisplayed (e.g., ocid1.instance.oc1..<unique_string>).
OCID of the Created Compute Instance
* Enter the OCID of the created compute instance (IAD-SP-PBT-1-VM-01) into the text box. The exact OCID will be available after Step 9 (e.g., ocid1.instance.oc1..<unique_string>).
Notes
* Ensure the security zone IAD_SAP-PBT-CSZ-01 and its associated recipe IAD-SP-PBT-CSP-01 allow compute instance creation in the public subnet (10.0.1.0/24).
* Verify network connectivity by testing SSH access using the public IP assigned to the instance.
"Your company is in the process of migrating its sensitive data to Oracle Cloud Infrastructure (OCI) and is prioritizing the strongest possible security measures. Encryption is a key part of this strategy, but you are particularly concerned about the physical security of the hardware where your encryption keys will be stored.
Which characteristic of OCI Key Management Service (KMS) helps ensure the physical security of your encryption keys?
- A. Granular customer control over key access permissions
- B. Utilization of FIPS 140-2 validated Hardware Security Modules (HSMs)"
- C. Seamless integration with other OCI services for streamlined workflows
- D. Centralized key management for simplified administration
Correct Answer: B 🗳️
Task 4: Create a Certificate Authority (CA)
Create a certificate authority, where:
CA name: PBT-CERT-CA-01-<username>
For example, if your username is 99008677-lab.user01, then the certificate authority name should be PBT- CERT-CA-01990086771abuser01 Ensure you eliminate special characters from the user name.
Common name: PBT-CERT-OCICA-01
Master Encryption Key: PBT-CERT-MEK-01 (created in the previous task)
Correct Answer:
See the solution below in Explanation.
Task 4: Create a Certificate Authority (CA)
Step 1: Access the OCI Vault
* Log in to the OCI Console.
* Navigate toIdentity & Security>Vault.
* Select the root compartment.
* Locate and click on the vault named PBI_Vault_SP.
Step 2: Create the Certificate Authority
* In the PBI_Vault_SP vault details page, underResources, clickCertificate Authorities.
* ClickCreate Certificate Authority.
* Enter the following details:
* Name: Replace <username> with your username (e.g., if your username is 99008677-lab.user01, remove special characters like - and . to get 99008677labuser01, then use PBT-CERT-CA-
0199008677labuser01).
* Common Name: Enter PBT-CERT-OCICA-01.
* Master Encryption Key: Select the PBT-CERT-MEK-01<username> key created in Task 3 (e.
g., PBT-CERT-MEK-0199008677labuser01).
* Subject: Leave as default or adjust (e.g., Organization, Country) if required by your setup.
* Validity Period: Set as needed (e.g., 10 years), or use the default.
* Compartment: Ensure it's set to the root compartment.
* ClickCreate Certificate Authorityand wait for the CA to be provisioned.
Step 3: Verify the Certificate Authority
* After creation, go to theCertificate Authoritiessection under PBI_Vault_SP.
* Confirm the CA PBT-CERT-CA-01<username> (e.g., PBT-CERT-CA-0199008677labuser01) is listed and its status is active.
During your investigation of a load balancer issue, you discovered that all back-end servers associated with one of the affected listeners were reported as unhealthy. However, when you checked the back-end servers, they seemed to be working just fine.
What might be causing this issue?
- A. Misconfigured health check
- B. Incorrect DNS configuration
- C. Incorrect subnet configuration
- D. Overloaded back-end servers
- E. Misconfigured security rule
Correct Answer: A 🗳️
Viewing page 1 out of 10 pages.
Viewing questions 1-4 out of 39 questions.
999 Customer Reviews
