[2022] 1Z0-1067-21 Exam Dumps, Test Engine Practice Test Questions
Pass 1Z0-1067-21 exam [Jan 29, 2022] Updated 56 Questions
Oracle 1Z0-1067-21 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
| Topic 10 |
|
NEW QUESTION 13
Here is a partial code from a Terraform template written for Oracle Cloud Infrastructure (OCI):
What operation(s) does it perform? (Choose the best answer.)
- A. Creates a lifecycle policy for an OCI Object Storage bucket for moving data to Archival storage at a specified time.
- B. Provides object read and write access for an OCI Object Storage bucket.
- C. Creates a URL to provide access to an OCI Object Storage bucket for managing objects.
- D. Creates a pre-authenticated request for objects in an OCI Object Storage bucket.
Answer: B
NEW QUESTION 14
You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.
The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the compute instance from the internet. However, you are not able to connect to the web server using your web browser.
Which step will resolve the issue? (Choose the best answer.)
- A. In the security list, remove the ssh rule.
- B. In the route table, add a rule for your default traffic to be routed to NAT gateway.
- C. In the security list, add an ingress rule for port 80 (http).
- D. In the route table, add a rule for your default traffic to be routed to service gateway.
Answer: D
NEW QUESTION 15
You run a large global application with 90% of customers based in the US and Canad a. You want to be able to test a new feature and allow a small percentage of users to access the new version of your application.
What Oracle Cloud Infrastructure Traffic Management steering policy should you utilize? (Choose the best answer.)
- A. Load Balancer
- B. ASN steering
- C. Geolocation steering
- D. IP Prefix steering
Answer: C
NEW QUESTION 16
You have been asked to set up connectivity between a client's on-premises network and Oracle Cloud Infrastructure (OCI). The requirements are:
Low latency: The applications are financial and require low latency connectivity into OCI. Consistency: The application isn't tolerant of performance variation.
Performance: The communications link needs to support up to 1.25 Gbps.
Encryption: The communications link needs to encrypt any data in transit between the on-premises network and OCI Virtual Cloud Network (VCN).
The client wants to implement the above with as low a cost as possible, while meeting all of the requirements. What should you suggest? (Choose the best answer.)
- A. Provision FastConnect with a single private virtual circuit.
- B. Provision FastConnect with a single public virtual circuit, and run an IPsec VPN tunnel over the top of this
- C. Provision FastConnect with a single public virtual circuit.
- D. Provision FastConnect with a single private virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.
- E. Provision a site-to-site IPsec VPN between your on-premises network and your virtual cloud network (VCN) using VPN Connect.
Answer: A
Explanation:
virtual circuit.
NEW QUESTION 17
A subscriber of an Oracle Cloud Infrastructure (OCI) Notifications service topic complained about not receiving messages from the service.
Which option can help you debug this issue? (Choose the best answer.)
- A. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to one day. Make sure that the subscriber is online at least once a day to help debug the issue.
- B. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to two hours. Configure an alarm on the NumberOfNotificationFailed metric through the OCI Monitoring service to help debug the issue.
- C. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service drops the message. Confirm that the subscriber is always online to receive messages to help debug the issue.
- D. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, check the NumberOfNotificationFailed metric through the OCI Monitoring service for failed messages. Copy these messages to an OCI Object Storage bucket. Make sure the subscriber has the required credentials to access this bucket to help debug the issue.
Answer: B
NEW QUESTION 18
Multiple teams are sharing a tenancy in Oracle Cloud Infrastructure (OCI). You are asked to figure out an appropriate method to manage OCI costs.
Which is NOT a valid technique to accurately attribute costs to resources used by each team? (Choose the best answer.)
- A. Create separate compartment for each team. Use the OCI cost analysis tools to filter costs by compartment.
- B. Create a Cost-Tracking tag. Apply this tag to all resources with team information. Use the OCI cost analysis tools to filter costs by tags.
- C. Define and use tags for resources used by each team. Analyze usage data from the OCI Usage Report which has detailed information about resources and tags.
- D. Create an Identity and Access Management (IAM) group for each team. Create an OCI budget for each group to track spending.
Answer: D
NEW QUESTION 19
Security Testing Policy describes when and how you may conduct certain types of security testing of Oracle Cloud Services, including vulnerability and penetration tests, as well as tests involving data scraping tools.
What does Oracle allow as part of this testing? (Choose the best answer.)
- A. Customers can validate that their network resources are isolated from other customer resources.
- B. Customers can simulate DoS attack scenarios as long as it's restricted to the customer's own environment.
- C. Customers are allowed to test Oracle Cloud Infrastructure (OCI) hardware related to resources in their tenancy.
- D. Customers are allowed to use their own testing and monitoring tools.
Answer: C
NEW QUESTION 20
You are using the Oracle Cloud Infrastructure Command Line Interface to launch a Linux virtual machine. You enter the following command (with correct values for all parameters):
The command fails.
Which is NOT a valid parameter in this command? (Choose the best answer.)
- A. -t <tenancy_id>
- B. - -subnet-id <subnet_id>
- C. -c <compartment_id>
- D. - -image-id <image_id>
- E. - -shape "<shape_name>"
Answer: A
NEW QUESTION 21
Your company has restructured its HR departments. As part of this change, you also need to re-organize compartments within Oracle Cloud Infrastructure (OCI) to align them to the company's new organizational structure. The following change is required:
Compartment Team_x needs to be moved under a new parent compartment, Project_B The tenancy has the following policies defined for compartments Project_A and Project_B: Policy1: Allow group G1 to manage instance-family in compartment HR:Project_A Policy2: Allow group G2 to manage instance-family in compartment HR:Project_B Which two statements describe the impacts after the compartment Team_x is moved? (Choose two.)
- A. Group G2 can now manage instance-families in compartment Project_B and compartment Team_X
- B. Group G2 can now manage instance-families in compartment Project_A but not in compartment Team_x
- C. Group G1 can now manage instance-families in compartment Project_A but not in compartment Team_x
- D. Group G1 can now manage instance-families in compartment Project_A, compartment Project_B and compartment Team_X
- E. Group G2 can now manage instance-families in compartment Project_B, compartment Project_A and compartment Team_X
Answer: A,C
NEW QUESTION 22
You have created an Autonomous Data Warehouse (ADW) service in your company's Oracle Cloud Infrastructure (OCI) tenancy and you now have to load historical data into it. You have already extracted this historical data from multiple data marts and data warehouses. This data is stored in multiple CSV text files and these files are ranging in size from 25 MB to 20 GB.
Which is the most efficient and error tolerant method for loading data into ADW? (Choose the best answer.)
- A. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute Data Pump Import for each CSV file to copy the contents into the corresponding ADW database table.
- B. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using the web console upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA for each CSV file to copy the contents into the corresponding ADW database table.
- C. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA for each CSV file to copy the contents into the corresponding ADW database table.
- D. Create the tables in the ADW database and then execute SQL*Loader for each CSV file to load the contents into the corresponding ADW database table.
Answer: C
NEW QUESTION 23
Which technique does NOT help you get the optimal performance out of the Oracle Cloud Infrastructure (OCI) File Storage service? (Choose the best answer.)
- A. Serialize operations to the file system to access consecutive blocks as much as possible.
- B. Limit access to the same Availability Domain (AD) as the File Storage service where possible.
- C. Right size compute instances from where file system is accessed based on their network capacity.
- D. Increase concurrency by using multiple threads, multiple clients, and multiple mount targets.
Answer: D
Explanation:
Section: (none)
Explanation
NEW QUESTION 24
One of the compute instances that you have deployed on Oracle Cloud Infrastructure (OCI) is malfunctioning. You have created a console connection to remotely troubleshoot it.
Which two statements about console connections are TRUE? (Choose two.)
- A. It is not possible to connect to the serial console to an instance running Microsoft Windows, however VNC console connection can be used.
- B. If you do not disconnect from the session, your serial console connection will automatically be terminated after 24 hours.
- C. It is not possible to use VNC console connections to connect to Bare Metal Instances.
- D. For security purpose, the console connection will not let you edit system configuration files.
- E. VNC console connection uses SSH port forwarding to create a secure connection from your local system to the VNC server attached to your instance's console.
Answer: B,E
NEW QUESTION 25
You have recently been asked to take over management of your company's infrastructure provisioning efforts, utilizing Terraform v0.12 to provision and manage infrastructure resources in Oracle Cloud Infrastructure (OCI).
For the past few days the development environments have been failing to provision. Terraform returns the following error:
You locate the related code block in the Terraform config and find the following:
Which correction should you make to solve this issue? (Choose the best answer.)
- A. Place a command at the end of line 16
- B. Modify line 15 to be the following:
tcp_options {
min = "22"
max = "22"
} - C. Replace the curly braces '{ }' in lines 11 and 16 with square braces '[ ]'
- D. Modify line 15 to be the following:
tcp_options = {min = "22", max = "22")
Answer: D
NEW QUESTION 26
What is a key benefit of using Oracle Cloud Infrastructure's Resource Manager for your Terraform provisioning and management activities? (Choose the best answer.)
- A. You can use Resource Manager to identify and maintain an inventory of all Compute and Database instances across your tenancy.
- B. Resource Manager manages to Terraform state file for your infrastructure and locks the file so that only one job at a time can run on a given stack.
- C. Resource Manager has administrative privileges by design. Even if your IAM user does not have access, you can leverage Resource Manager to provision new resources to any compartment in the Tenancy.
- D. You can use Resource Manager to apply patches to all existing Oracle Linux interfaces in a specified compartment.
Answer: B
NEW QUESTION 27
You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.
The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the compute instance from the internet. However, you are not able to connect to the web server using your web browser.
Which step will resolve the issue? (Choose the best answer.)
- A. In the security list, remove the ssh rule.
- B. In the route table, add a rule for your default traffic to be routed to NAT gateway.
- C. In the security list, add an ingress rule for port 80 (http).
- D. In the route table, add a rule for your default traffic to be routed to service gateway.
Answer: D
NEW QUESTION 28
You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG: NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:
However, after checking the bastion host logs, you discovered that there are IP addresses other than your own that can access your bastion host.
What is the root cause of this issue? (Choose the best answer.)
- A. A netmask of /32 allows all IP address in the 140.19.2.0 network, other than your IP 140.19.2.140
- B. All compute instances associated with NSG-050504 are also able to connect to the bastion host.
- C. The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.
- D. The Security List allows access to all IP address which overrides the Network Security Group ingress rules.
Answer: B
NEW QUESTION 29
You have created a group for several auditors. You assign the following policies to the group:
What actions are the auditors allowed to perform within your tenancy? (Choose the best answer.)
- A. Auditors are able to create new instances in the tenancy.
- B. Auditors are able to view all resources in the compartment.
- C. The Auditors are able to delete resource in the tenancy.
- D. The Auditors can view resources in the tenancy.
Answer: B
NEW QUESTION 30
You are using the Oracle Cloud Infrastructure Command Line Interface to launch a Linux virtual machine. You enter the following command (with correct values for all parameters):
The command fails.
Which is NOT a valid parameter in this command? (Choose the best answer.)
- A. -t <tenancy_id>
- B. - -subnet-id <subnet_id>
- C. -c <compartment_id>
- D. - -image-id <image_id>
- E. - -shape "<shape_name>"
Answer: A
NEW QUESTION 31
You have received an email from your manager to provision new resources on Oracle Cloud Infrastructure (OCI). When researching OCI, you determined that you should use OCI Resource Manager. Since this is a task that will be done multiple times for development, test, and production. You will need to create a command that can be re-used.
Which CLI command can be used in this situation? (Choose the best answer.)
- A. oci resource-manager stack update --tenancy-id <tenancy_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name "Production stack build" \
--description Creating new Production environment - B. oci resource-manager stack create --tenancy-id <tenancy_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name Production stack build \
--description Creating new Production environment - C. oci resource-manager stack create --compartment-id <compartment_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name Production stack build \
--description Creating new Production environment - D. oci resource-manager stack update --compartment-id <compartment_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name "Production stack build" \
--description Creating new Production environment
Answer: C
NEW QUESTION 32
You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively.
You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us-phoenix-1 region only and not any other OCI regions.
What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.) Allow group PHX-Admins to manage all-resources in tenancy where
- A. request.target= 'phx'
Allow group PHX-Admins to manage all-resources in tenancy where - B. request.location= 'phx'
- C. request.region= 'phx'
Allow group PHX-Admins to manage all-resources in tenancy where - D. request.permission= 'phx'
Allow group PHX-Admins to manage all-resources in tenancy where
Answer: C
NEW QUESTION 33
......
Oracle 1Z0-1067-21 Real 2022 Braindumps Mock Exam Dumps: https://www.examstorrent.com/1Z0-1067-21-exam-dumps-torrent.html