1z0-1104-23 - Oracle Cloud Infrastructure 2023 Security Professional

Solutions:

  Create Bastion:

• From the navigation menu, select Identity & Security and then click Bastion.
• In the left navigation pane, select your working compartment under List Scope from the drop-down menu.
• Click Create Bastion and enter the following details:a. Bastion name: SPPBTBASTION992831403labuser13b. Configure Networking:i. Target virtual cloud network: Select PBT-BAS-VCN-01ii. Target Subnet: Select PBT-BAS-SNET-01 (Private Subnet) Note: Click Change compartment and select the working compartment to locate VCN and Private subnet gateway.c. CIDR block allowlist: 0.0.0.0/0 (from anywhere) You can add one or more address ranges in the CIDR notation that you want to allow to connect to sessions hosted by this bastion.d. Click Create Bastion.

After a few minutes, you can see that the Bastion has been successfully created, and the state is Active.

Create a Bastion Session:

• From the navigation menu, select Identity & Security and then click Bastion.
• In the left navigation pane, select your working compartment under List Scope from the drop-down menu.
• Click the SPPBTBASTION992831403labuser13 bastion.
• Click Create a Session and enter the following details:a. Bastion name: PBT-1-Session-01b. Session type: Select Managed SSH session.c. Session name: PBT-1-Session-01 d. Username: Enter opc e. Compute instance in: Select PBT-BAS-VM-01.Note: Click Change compartment and select the working compartment to locate VCN for the compute instance.f. Add SSH keyg. Click Generate SSH key pair. h. Click Save private key. This will save the private key to your local workstation.i. Click Save public key. This will save the public key to your local workstation.j. Click Create session.

After a few minutes, you can see that the Bastion session has been successfully created, and the state is Active.

SOLUTION:

• From the navigation menu, select Identity & Security. Navigate to Web Application Firewall and click Policies under it.
• From the left navigation pane, under List Scope, select from the drop-down menu.
• Click Create WAF Policy.
• The Create WAF Policy dialogue box appears. Creating a WAF policy consists of the following sections accessible from the left-side navigation:a) Basic informationb) Access controlc) Rate limitingd) Protectionse) Select enforcement pointf) Review and create.
• In the Basic Information section:a) Name: IAD-SP-PBT-WAF-01_99233424-lab.user01b) WAF Policy Compartment: Select your working compartmentc) Action: Keep the default preconfigured actions; do not edit.d) Click the Select enforcement point section accessible from the left-side navigation.Note: You will configure the other section later in this practice. You will directly configure the Enforcement point.
• In the Select enforcement point section: a) Add Firewalls: Select a load balancer IAD-SP-PBT-LB-01 in your current compartment from the list. b) Click Next for Review and Create.
• Under the Review and Create Section: a) Verify the enforcement point added in the previous step.
• Click Create WAF Policy.

The Create WAF Policy dialogue box closes, and you are returned to the WAF Policy page. The WAF policy you created is listed.

SOLUTION:

• From the navigation menu, select Networking and then click Virtual Cloud Network.
• In the left navigation pane, under List Scope, select from the drop-down menu.
• Click Start VCN Wizard.
• Select Create VCN with Internet Connectivity and click Start VCN Wizard.
• On the Configuration page, enter the following:

a) Name: IAD-WAF-PBT-VCN-01

b) Note: Leave all the other options in their default setting.

c) Click Next.

d) Verify the details on the Review and Create page.

• Click Create to start creating the VCN and its resources.
• Click View Virtual Cloud Network to verify the creation of the VCN and its resources.

You can now see that the VCN has been successfully created and is in the Available state, with the following components:

• uk.co.certification.simulator.questionpool.PList@18f21aa0

This format keeps the instructions intact while preserving the original content.