OCI Security Professional
Oracle Cloud Infrastructure 2023 Security Professional
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The Oracle Cloud Infrastructure 2023 Security Professional credential, tracked under exam code 1Z0-1104-23, is Oracle's professional-level certification for practitioners who design, implement, and operate security controls across OCI tenancies. It suits cloud security engineers, cloud architects, and administrators who already work hands-on with compartments, policies, VCNs, and Vault, and who want independent validation of that depth rather than an entry-level badge. Expect the exam to probe four broad areas: identity and access management fundamentals, including dynamic groups and policy syntax; network security through security lists, network security groups, gateways, and the shared-responsibility boundary; data protection covering encryption at rest and in transit, Vault keys, and secrets; and security monitoring via Audit, Logging, and Cloud Guard. Preparation should be lab-first. Build a tenancy, write least-privilege policies, segment a VCN with NSGs, rotate keys in Vault, and read the audit logs your own actions generate. Pair that practice with Oracle's official training and documentation. Note that Oracle University's exam page was unreachable when this page was compiled, so question count, duration, passing score, fee, and retake rules are unconfirmed here and should be verified directly with Oracle before you book.
What you'll study
About OCI Security Professional preparation
How many questions are on the 1Z0-1104-23 exam, and how long do I get?
This page cannot confirm either figure. Oracle University's exam page was returning a maintenance notice when checked, so question count and duration are unverified. Treat any number you see elsewhere as unconfirmed until you read it on Oracle's own exam page or your booking confirmation.
What score do I need to pass?
The passing score is not confirmed here, because the official source page was unavailable. Oracle typically publishes a scaled passing score on the exam page and restates it in the booking flow. Check both before exam day rather than relying on forum claims, which drift between exam revisions.
How much does the exam cost and where do I register?
Fee information could not be retrieved, so no figure is given. Registration normally runs through Oracle University and its testing partner, and pricing varies by country and currency. Confirm the current fee in your local Oracle University store or with your regional Oracle University representative before paying.
If I fail, how soon can I retake it?
Retake policy is unconfirmed on this page. Oracle's usual pattern is a waiting period before a second attempt, with longer gaps after repeated failures, but verify the current rule on the official exam page or with Oracle Certification support, since policies change and a wrong assumption can cost you weeks.
How difficult is this exam compared with OCI Foundations?
It is a professional-level exam, so expect scenario questions that ask you to choose between plausible configurations rather than recall definitions. Weak candidates usually know what a security list does but cannot explain when an NSG is the better control, or how policy statements resolve across compartments and tenancies.
What should I study first?
Start with identity and access management, because policy syntax and dynamic groups underpin almost every other domain. Then move to VCN security, encryption and Vault, and finally monitoring with Audit, Logging, and Cloud Guard. Practise each area in a real tenancy; reading alone rarely survives the scenario-style items.
What are the most common failure modes?
Candidates lose marks on policy statement grammar, on confusing security lists with NSGs, and on encryption details such as key rotation and customer-managed versus Oracle-managed keys. Another frequent gap is monitoring: not knowing which service surfaces which signal, or how Cloud Guard detectors and responders differ from Logging.
Does the certification expire, and is there a validity period?
Validity could not be confirmed from the source, so no period is stated. Oracle has changed certification expiry rules over time, so check the current policy on Oracle's certification site and note the date you passed, since renewal obligations are usually counted from then.
Is this page affiliated with Oracle?
No. This is independent study material written for candidates preparing for the exam. It is not produced, endorsed, or reviewed by Oracle, and it does not reproduce any official question bank. Always treat Oracle's own documentation and exam page as the authoritative source for exam logistics.