1z0-1104-23 Exam Dumps : Oracle Cloud Infrastructure 2023 Security Professional

This policy allows the group orgauditgrp to inspect all resources in the tenancy, except for those in the compartment named dev. The inspect verb in Oracle Cloud Infrastructure’s Identity and Access Management (IAM) policies allows a group to get the metadata of a resource but does not allow the group to get the resource’s content. The condition where target.compartment.name !=dev ensures that resources in the dev compartment are excluded from this policy.

When setting up VCN peering within the same region, the VCNs must have non-overlapping CIDRs12. In this case, the CIDR blocks 12.0.0.0/16 and 194.168.0.0/16 are different and do not overlap, making them suitable for VCN peering

SOLUTION:

• From the navigation menu, select Identity & Security. Navigate to Web Application Firewall and click Policies under it.
• In the left navigation pane, under List Scope, select the working compartment from the drop-down menu.
• Click the IAD-SP-PBT-WAF-01_99233424-lab.user01 WAF policy to add a protection rule.
• On the policy details page, click Protections under Policy.
• In the Protection section on the console, click Manage request protection rules.
• Click Add Request Protection Rule.
• In the Add protection rule dialog box, enter the following details:a) Name: WAF-PBT-XSS-Protectionb) Conditions: Do not add any condition.c) Under Rule action - Action name: Select Create New Action from the drop-down menu.
• In the Add Action dialog box, enter the following details:a) Name: WAF-PBT-XSS-Actionb) Type: Return HTTP Responsec) Response code: Select “503 Service unavailable” from the drop-down menu.d) Response page body: Type “Service Unavailable: Web Server is secured against XSS attacks.”e) Click Add action.
• Under Protection Capabilities, click Choose protection capabilities.
• In the Choose protection capabilities dialog box, complete the following:a) Filter by tags: Type “xss” and press Enter.b) Filter by version: Latestc) Protection list: Check all protections. Select the check box in the header to add all.d) Click Choose protection capabilities.e) Review and click Add request protection rule.f) Click Save Changes in the Manage Request Protection Rules dialog box.

The rule you created appears in the list. The WAF policy will update and get back to Active state.