Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Oracle Exam 1Z0-1104-23 Topic 8 Question 16 Discussion

Actual exam question for Oracle's 1Z0-1104-23 exam
Question #: 16
Topic #: 8
[All 1Z0-1104-23 Questions]

Which Security Zone policy is NOT valid?

Show Suggested Answer Hide Answer
Suggested Answer: A

SOLUTION:

From the navigation menu, select Identity & Security. Navigate to Web Application Firewall and click Policies under it.

From the left navigation pane, under List Scope, select <your working compartment> from the drop-down menu.

Click Create WAF Policy.

The Create WAF Policy dialogue box appears. Creating a WAF policy consists of the following sections accessible from the left-side navigation:

a) Basic information

b) Access control

c) Rate limiting

d) Protections

e) Select enforcement point

f) Review and create.

In the Basic Information section:

a) Name: IAD-SP-PBT-WAF-01_99233424-lab.user01

b) WAF Policy Compartment: Select your working compartment

c) Action: Keep the default preconfigured actions; do not edit.

d) Click the Select enforcement point section accessible from the left-side navigation.

Note: You will configure the other section later in this practice. You will directly configure the Enforcement point.

In the Select enforcement point section:a) Add Firewalls: Select a load balancer IAD-SP-PBT-LB-01 in your current compartment from the list. b) Click Next for Review and Create.

Under the Review and Create Section:a) Verify the enforcement point added in the previous step.

Click Create WAF Policy.

The Create WAF Policy dialogue box closes, and you are returned to the WAF Policy page. The WAF policy you created is listed.


Contribute your Thoughts:

Vicki
11 months ago
Don't forget to verify if it blocks the XSS attack perfectly!
upvoted 0 times
...
Daniel
11 months ago
Yes, name it like IAD-SP-PBT-WAF-01_99233424-lab.user01.
upvoted 0 times
...
Yan
11 months ago
First step is creating the WAF policy, right?
upvoted 0 times
...
Vicki
12 months ago
Absolutely. Especially making sure it blocks XSS with HTTP 503.
upvoted 0 times
...
Daniel
1 years ago
Yeah. Sounds complex. WAF configuration is crucial.
upvoted 0 times
...
Yan
1 years ago
Have you seen Task 4? Configure a WAF against XSS attacks?
upvoted 0 times
...
Twila
1 years ago
Yes, we need to verify the environment to ensure the WAF is blocking XSS attacks.
upvoted 0 times
...
Krystina
1 years ago
And we need to verify the environment against XSS attacks, right?
upvoted 0 times
...
Deandrea
1 years ago
Don't forget to configure Protection Rules against XSS attacks.
upvoted 0 times
...
Twila
1 years ago
We need to configure a Virtual Cloud Network, create a Compute Instance with Web Server, create a Load Balancer, and create a WAF policy.
upvoted 0 times
...
Krystina
1 years ago
What tasks do we need to perform to complete this deployment?
upvoted 0 times
...
Deandrea
1 years ago
You can use OCI Web Application Firewall for that.
upvoted 0 times
...
Twila
1 years ago
I need to configure Web Application Firewall to protect against XSS attacks.
upvoted 0 times
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77