Oracle 1Z0-1104-23 Exam Dumps

Challenge 4 - Task 3 of 6

Configure Web Application Firewall to Protect Web Server Against XSS Attack

Scenario

You have to protect web applications hosted on OCI from cross-site scripting (XSS) attacks. You can use the OCI Web Application Firewall (WAF) capabilities to create rules that compare against incoming requests to determine if the request contains an XSS attack payload. If a request is determined to be an attack, WAF should return the HTTP Service Unavailable (503) error.

To ensure that the configured WAF blocks the XSS attack, run the following script:[http:///index.html?

/index.html?

)

To complete this deployment, you have to perform the following tasks in the environment provisioned for you:

Configure a Virtual Cloud Network (VCN)

Create a Compute Instance and install the Web Server

Create a Load Balancer and update Security List

Create a WAF policy

Configure Protection Rules against XSS attacks

Verify the created environment against XSS attacks

Note:You are provided with access to an OCI Tenancy, an assigned compartment, and OCI credentials. Throughout your exam, ensure to use the assigned Compartment 99233424-C01 and Region us-ashburn-1.

Complete the following task in the provisioned OCI environment:

Go to the VCN IAD-WAF-PBT-VCN-01.

Create a Security List with the name IAD-SP-PBT-LB-SL-01.

Create a Public subnet named LB-Subnet-IAD-SP-PBT-SNET-02 and attach the above-created security list.

Create a Load Balancer with the name IAD-SP-PBT-LB-01.

Create a Listener Name with the name IAD_SP_PBT_LB_LISN_01.

Add appropriate Ingress and Egress rules to IAD-SP-PBT-LB-SL-01, to allow http traffic to the Load Balancer subnet.

ASee the solution below in Explanation

Question 2

Challenge 4 - Task 2 of 6

Configure Web Application Firewall to Protect Web Server Against XSS Attack

Scenario

To ensure that the configured WAF blocks the XSS attack, run the following script:[http:///index.html?

/index.html?

)

To complete this deployment, you have to perform the following tasks in the environment provisioned for you:

Configure a Virtual Cloud Network (VCN)

Create a Compute Instance and install the Web Server

Create a Load Balancer and update Security List

Create a WAF policy

Configure Protection Rules against XSS attacks

Verify the created environment against XSS attacks

Note:You are provided with access to an OCI Tenancy, an assigned compartment, and OCI credentials. Throughout your exam, ensure to use the assigned Compartment 99233424-C01 and Region us-ashburn-1.

Complete the following task in the provisioned OCI environment:

Create a Compute Instance with the nameIAD-SP-PBT-VM-01, using theOracle Linux 8image andVM.Standard2.1shape.

SSH to the compute instance using Cloud Shell.

Install and configure Apache web server:

a. Install Apache server:

sudo yum -y install httpd

b. Enable Apache and start Apache server:

bash

sudo systemctl enable httpd

sudo systemctl restart httpd

c. Create a firewall rule to enable HTTP connection through port 80 and reload the firewall:

css

sudo firewall-cmd --permanent --add-port=80/tcp

sudo firewall-cmd --reload

d. Create an index file for your web server:

vbnet

sudo bash -c 'echo You are visiting Web Server 1 >>

/var/www/html/index.html'

ASee the solution below in Explanation

Answer : A

SOLUTION:

From the navigation menu, select Compute and then click Instances.

In the left navigation pane, under List Scope, select <your assigned compartment> from the drop-down menu.

Click Create Instance. In the Create Instance dialogue box, provide the following details:

a) Name: IAD-SP-PBT-VM-01

b) Placement: ADI

c) Note: If the Service Limit error is displayed, choose a different availability domain.

d) Image: Oracle Linux 8

e) Shape: Click Change shape; then select Ampere shape series and select VM.Standard2.1.

f) Networking: IAD-WAF-PBT-VCN-01 and Public Subnet

g) Public Address: Assign a Public IPv4 address.

h) Generate (or upload) SSH Keys:

i) Click Generate a key pair for me.

j) Click Save private key. This will save the private key to your local workstation.

k) Click Save public key. This will save the public key to your local workstation.

l) Click Create.

Note: After a few minutes, you can see that the instance has been successfully created and the state is Running.

Under instance access, copy the Public IP address value to a Notepad file. We refer to it as the VM-O1-Public IP address.

Click the Developer Tools icon at the right of the OCI console header and click Cloud Shell to launch your Cloud Shell and use SSH to log in to your instance, IAD-SP-PBT-VM-01, by using the following command:

php

ssh -i <username>&

Reminders: a) Upload the private key to the Cloud Shell you downloaded to your workstation earlier. Change the permission of the private key file by executingchmod 400 . Reference to upload file to cloud shell b)is the full path and name of the file that contains the private key associated with the instance you want to access. c)<username>is the default user opc. d)is the Public IP address of the instance. In our case, we refer to it as VM-01-Public IP. Note: Enter yes in response to ''Are you sure you want to continue connecting (yes/no)?' e) You are now connected to the instance IAD-SP-PBT-VM-01.

While connected to your compute instance via SSH, run the following commands to install and configure the Apache web server: a) Install Apache Server:

sudo yum -y install httpd.

b) Enable Apache and start Apache server:

bash

sudo systemctl enable httpd.sudo systemctl restart httpd

c) Create a firewall rule to enable HTTP connection through port 80 and reload the firewall:

css

sudo firewall-cmd --permanent --add-port=80/tcp

sudo firewall-cmd --reload

d) Create an index file for your web server:

css

sudo bash -c 'echo You are visiting Web Server 1 >> /var/www/html/index.html'

e) Exit the SSH connection:

bash

exit

After executing all the commands successfully, open a browser in your local system and enter the URL http://<Public IP of IAD-SP-PBT-VM-01>.

Note: Your browser will not return anything because port 80 is not opened yet for the instance subnet.

Question 3

Challenge 4 - Task 1 of 6

Configure Web Application Firewall to Protect Web Server Against XSS Attack

Scenario

To ensure that the configured WAF blocks the XSS attack, run the following script:[http:///index.html?

/index.html?

)

To complete this deployment, you have to perform the following tasks in the environment provisioned for you:

Configure a Virtual Cloud Network (VCN)

Create a Compute Instance and install the Web Server

Create a Load Balancer and update Security List

Create a WAF policy

Configure Protection Rules against XSS attacks

Verify the created environment against XSS attacks

Note:You are provided with access to an OCI Tenancy, an assigned compartment, and OCI credentials. Throughout your exam, ensure to use the assigned Compartment 99233424-C01 and Region us-ashburn-1.

Complete the following task in the provisioned OCI environment:

Create a VCN using wizard with the name IAD-WAF-PBT-VCN-01

ASee the solution below in Explanation

Question 4

Which value must an application have to retrieve a secret bundle from Oracle Cloud Infrastructure? (Choose the best Answer.)

ABundle OCID

BSecret OCID

CVault OCID

DKey OCID

Question 5

Which Virtual Cloud Network (VCN) configuration within a region will allow successful local peering using a local peering gateway? (Choose the best Answer.)

AVCN with 10.0.0.0/16 and VCN2 with 192.168.0.0/16

BVICN1 with 10.0.0.0/16 and VCN2 with 10.0.0.0/24

CVCN1 with 192.168.0.0/16 and VCN2 with 192.168.0.0/24

DVCN1 with 192.168.0.0/24 and VCN2 with 192.168.0.0/24

EVCN1 with 10.0.0.0/16 and VCN2 with 192 168 0 0/14

Unlock All Features of Oracle 1Z0-1104-23 Dumps Software

Just have a look at the best and updated features of our 1Z0-1104-23 dumps which are described in detail in the following tabs. We are very confident that you will get the best deal on this platform.

Select Question
Types you want

Set your desired
pass percentage

Allocate Time
(Hours: Minutes)

Create Multiple
Practice test with
limited questions

Customer
Support

Latest Success Metrics For actual 1Z0-1104-23 Exam

This is the best time to verify your skills and accelerate your career. Check out last week's results, more than 90% of students passed their exam with good scores. You may be the Next successful Candidate.

95%

Average Passing Scores in final Exam

91%

Exactly Same Questions from these dumps

90%

Customers Passed Oracle 1Z0-1104-23 exam