(2022) 1z0-1067-22 Dumps and Practice Test (56 Questions)
Guide (New 2022) Actual Oracle 1z0-1067-22 Exam Questions
Oracle 1z0-1067-22 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
NEW QUESTION 11
You have been asked to ensure that in-transit communication between an OracleCloud Infrastructure (OCI) compute instance and an on-premises server (192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a DynamicIPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added.
What solution should you recommend? (Choose the best answer.)
- A. The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.
- B. The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.
- C. Advertise a 192.168.10.10/32 route over the VPN.
- D. Advertise a 192.168.10.10/32 router over the FastConnect.
Answer: C
Explanation:
Explanation
https://www.oracle.com/uk/cloud/networking/fastconnect-faq.html
NEW QUESTION 12
Which two statements about the OracleCloud Infrastructure (OCI) Command Line Interface (CLI) are TRUE?
(Choose two.)
- A. You can filter CLI output using the JMESPath query option for JSON.
- B. The CLI provides an automatic way to connect with instances provisioned on OCI.
- C. You can run CLI commands from inside OCI Regions only.
- D. The CLI allows you to use the Python language to interact with OCI APIs.
- E. The CLI provides the same core functionality as the Console, plus additional commands.
Answer: A,E
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/Content/API/SDKDocs/cliusing.htm
https://blogs.oracle.com/cloud-infrastructure/post/exploring-the-search-and-query-features-of-oracle-cloud-infras
NEW QUESTION 13
You are asked to implement the disaster recovery (DR) and business continuity requirements for Oracle Cloud Infrastructure (OCI) Block Volumes. Two OCI regions being used: a primary/source region and a DR/destination region. The requirements are:
* There should be a copy of data in the destination region to use if a region-wide disaster occurs in the source region
* Minimize costs
Which design will help you meet these requirements? (Choose the best answer.)
- A. Clone block volumes. Use Object Storage lifecycle management to automatically move clone objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.
- B. Back up block volumes. Copy block volume backups from source region to destination region at regular intervals.
- C. Clone block volumes. Copy block volume clonesfrom source region to destination region at regular intervals.
- D. Back up block volumes. Use Object Storage lifecycle management to automatically move backup objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.
Answer: B
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/Content/Block/Tasks/copyingvolumebackupcrossregion.htm
NEW QUESTION 14
Which two statements are TRUE about Object Storage data security and encryption in Oracle Cloud Infrastructure (OCI)? (Choose two.)
- A. Data needs to be decrypted on the client side before retrieving it.
- B. Client-side encryption is managed by the customer.
- C. A VPN connection to OCI is required to ensure secure data transfer to an object storage bucket.
- D. All traffic to and from Object Storage service is encrypted using TLS.
- E. OCI Vault Management is used by default to provide data security.
Answer: B,D
NEW QUESTION 15
One of the compute instances that you have deployed on Oracle Cloud Infrastructure (OCI) is malfunctioning.
You have created a console connection to remotely troubleshoot it.
Which two statements about console connections are TRUE? (Choose two.)
- A. For security purpose, the console connection will not let you edit system configuration files.
- B. It is not possible to use VNC console connections to connect to Bare Metal Instances.
- C. VNC console connection uses SSH port forwarding to create a secure connection from your local system to the VNC server attached to your instance's console.
- D. If you do not disconnect from the session, your serial console connection will automatically be terminated after 24 hours.
- E. It is not possible to connect to the serial console to an instance running Microsoft Windows, however VNC console connection can beused.
Answer: C,D
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/Content/Compute/References/serialconsole.htm
NEW QUESTION 16
A developer has created a file system in Oracle Cloud Infrastructure (OCI) File Storage service. She launches an Oracle Linux compute instance and successfully mounts the file system from the instance.
She then tries writing to the file system from the compute instance using the following command:
touch /mnt/yourmountpoint/helloworld
But gets an error message:
touch: cannot touch'/mnt/yourmountpoint/helloworrld': Permission denied Which is a reason for this error? (Choose the best answer.)
- A. 'touch' command is not available in Oracle Linux by default.
- B. User is connecting as the default Oracle Linux user 'opc' instead of 'root' user.
- C. Service limits or quota for file system writes have been breached.
- D. Useris not part of any OCI Identity and Access Management group with write permissions to File Storage service.
Answer: B
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/Content/File/Troubleshooting/cannotwrite.htm When a file system is created, the root user owns the root directory. If you're connecting from an instance that uses a Linux orCentOS platform image, the default user is opc. The default user is ubuntu when you connect from an instance that uses an Ubuntu platform image. These default users are not root users, so you can't initially write a file or directory to a new file system with these users.
NEW QUESTION 17
You are working as a Cloud Operations Administrator for your company. They have different Oracle Cloud Infrastructure (OCI) tenancies for developmentand production workloads. Each tenancy has resources in two regions - uk-london-1 and eu-frankfurt-1. You are asked to manage all resources and to automate all the tasks using OCI Command Line Interface (CLI).
Which is the most efficient method to managemultiple environments using OCI CLI? (Choose the best answer.)
- A. Run oci setup config to create new credentials for each environment every time you want to access the environment.
- B. Use different bash terminals for each environment.
- C. Create environment variables for the sets of credentials that align to each combination of tenancy, region, and environment.
- D. Use OCI CLI profiles to create multiple sets of credentials in your config file, and reference the appropriate profile at runtime.
Answer: D
NEW QUESTION 18
A subscriber of an Oracle Cloud Infrastructure (OCI) Notifications service topic complained about not receiving messages from the service.
Which optioncan help you debug this issue? (Choose the best answer.)
- A. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to one day. Make sure that the subscriber is online at least once a day to help debug the issue.
- B. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to two hours. Configure an alarm on the NumberOfNotificationFailed metric through the OCI Monitoring service to help debug the issue.
- C. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, check the NumberOfNotificationFailed metric through the OCI Monitoring service for failed messages. Copy these messages to an OCI ObjectStorage bucket. Make sure the subscriber has the required credentials to access this bucket to help debug the issue.
- D. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service drops the message. Confirm that the subscriber is always online to receive messages to help debug the issue.
Answer: B
Explanation:
Explanation
https://www.oracle.com/devops/notifications/faq/
When a subscriber's endpoint doesn't acknowledge receipt of a message, the service retries delivery and currently retains the message up to two hours from the time the message is published to a topic. The service tries to deliver messages within the retentionwindow.
NEW QUESTION 19
Your customer is running a set of compute instances inside a private subnet to manage their workloads on Oracle Cloud Infrastructure(OCI) tenancy. You have set up auto scaling feature to provide consistent performance to their end users during period of high demand.
Which step should be met for auto scaling to work? (Choose the best answer.)
- A. OS Management Service agent (osms) mustbe installed on the instances.
- B. Audit logs for the instances should be enabled.
- C. Monitoring for the instances should not be enabled.
- D. Service gateway should be setup to allow instances to send metrics to monitoring service.
Answer: D
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/Content/Compute/Tasks/enablingmonitoring.htm#Enabling_Monitoring_for_C Service gateways or public IP addresses: The compute instance must have either a public IP address or a service gateway to be able to send compute instance metrics to the Monitoring service.
For metric-based autoscaling, monitoring is enabled on the instances in the instance pool, and the Monitoring service is receiving metrics that are emitted by the instance. When you initially create an instance pool using instances that support monitoring, monitoring is enabled by default, regardless of the settingsin the pool's instance configuration.
NEW QUESTION 20
Your company recently adopted a hybrid cloud architecture which requires them to migrate some of their on- premises web applications to Oracle Cloud Infrastructure (OCI). You created a Terraform template which automatically provisions OCI resources such as compute instances, load balancer, and a database instance.
After running the stackusing the terraform apply command, it successfully launched the compute instances and the load balancer, but it failed to create a new database instance with the following error:
Service error: NotAuthorizedOrNotFound. shape VM.Standard2.4 not found. httpstatus code: 404 You discovered that the resource quotas assigned to your compartment prevent you from using VM.Standard2.4 instance shapes available in your tenancy. You edit the Terraform script and replace the shape with VM.Standard2.2 Which option would you recommend to re-run the terraform command to have required OCI resources provisioned with the least effort? (Choose the best answer.)
- A. terraform refresh-target=oci_database_db_system.db_system
- B. terraform apply -target=oci_database_db_system.db_system
- C. terraform plan -target=oci_database_db_system.db_system
- D. terraform apply -auto-approve
Answer: D
NEW QUESTION 21
You have the following compartment structure within your company's Oracle Cloud Infrastructure (OCI) tenancy:
You want to create a policy in the root compartment to allow SystemAdmins to manage VCNs only in CompartmentC.
Which policy is correct? (Choose the best answer.)
- A. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentC
- B. Allow group SystemAdmins to manage virtual-network-family in
compartmentCompartmentA:CompartmentB:CompartmentC - C. Allow group SystemAdmins to manage virtual-network-family in compartment Root
- D. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentB:CompartmentC
Answer: B
Explanation:
Explanation
Complete Compartment path is required. It is also advisable to do so, as policies are name based ones.
NEW QUESTION 22
You created an Oracle Linux compute instance through the Oracle Cloud Infrastructure (OCI) management console then immediately realize you forgot toadd an SSH key file. You notice that OCI compute service provides instance console connections that supports adding SSH keys for a running instance. Hence, you created the console connection for your Linux server and activated it using the connection string provided.
However, now you get prompted for a username and password to login.
What option should you recommend to add the SSH key to your running instance, while minimizing the administrative overhead? (Choose the best answer.)
- A. You need to configure the boot loader to use ttyS0 as a console terminal on the VM.
- B. You need to terminate the running instance and recreate it by providing the SSH key file.
- C. You need to modify the serial console connection string to include the identity file flag, -i to specify the SSH key to use.
- D. You need to reboot the instance from the console, boot into the bash shell in maintenance mode,and add SSH keys for the opc user.
Answer: D
Explanation:
Explanation
If you created an instance without an SSH key, you can use the serial console toboot into maintenance mode and add or reset the SSH key for the opc user or reset the password for the opc user. Alternately, you can stop the instance, attach the boot volume to a new instance, and configure SSH on the new instance.
https://docs.oracle.com/en-us/iaas/Content/Compute/Tasks/accessinginstance.htm
NEW QUESTION 23
Which technique does NOT help you get the optimal performance out of the Oracle Cloud Infrastructure (OCI) File Storage service? (Choose the best answer.)
- A. Increase concurrency by using multiple threads, multiple clients, and multiple mount targets.
- B. Serialize operations to the file system to access consecutive blocks as much as possible.
- C. Right size compute instances from where file system is accessed based on their network capacity.
- D. Limit access to the same Availability Domain (AD) as the File Storageservice where possible.
Answer: A
Explanation:
Explanation
"File Storage performance increases with parallelism. Increase concurrency by using multiple threads, multiple clients, and multiple mount targets."
NEW QUESTION 24
You have recently joined a startup company and quickly find that nobody is tracking the amount of money spent on Oracle Cloud Infrastructure (OCI). Seeing an opportunity to help save money you begin creating a solution tobetter track the cost of resources provisioned by each individual on the team.
Which option allows you to identify excessive spend across all resources in your tenancy? (Choose the best answer.)
- A. Create a budget for each compartment that will send a notification when monthly spend reaches a pre- defined amount.
- B. Use the Python SDK to write a custom application thatwill monitor the Audit log. Look for CREATE events and configure the application to send you an email each time a new resource is created.
- C. Create a tag namespace named BILLING with a Tag Key named CostCenter. Tag each of your resources with this Tag Keyand the correct value.
- D. Use the Events Service and create rules that will act when a new Object Storage bucket or Compute Instance has been created. Have the rule email you each time one of these events occurs.
Answer: C
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/Content/Tagging/Tasks/usingcosttrackingtags.htm
NEW QUESTION 25
You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.
The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the computeinstance from the internet. However, you are not able to connect to the web server using your web browser.
Which step will resolve the issue? (Choose the best answer.)
- A. In the route table, add a rule for your default traffic to be routed to NAT gateway.
- B. In the route table, add a rule for your default traffic to be routed to service gateway.
- C. In the security list, remove the ssh rule.
- D. In the security list, add an ingress rule for port 80 (http).
Answer: D
Explanation:
Explanation
You need to add a rule in thesecurity list table to allow access to web application. Web applications are usually exposed over port 80 (HTTP), therefore answer B makes sense here.
NEW QUESTION 26
You have been contracted by a local e-commerce company to assistwith enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet, and a database in a separate, private subnet.
The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically.
After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)
- A. Create a load balancer policy in the Traffic Management service. Configure one answerfor each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.
- B. Create a failover policy in the Traffic Management service. Set the IP address of the public load balancerfor the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.
- C. Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A record. Inform customers to prepend the website URL with failover if the primary site is unavailable.
- D. Deploy a new load balancer in the primary region. Create one backend set for theprimary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.
Answer: B
NEW QUESTION 27
You have been asked to review a network design for Oracle Cloud Infrastructure (OCI) by a major client. The client's IT team needs to provision two Virtual Cloud Networks (VCNs) for a major application. The application uses a large number of virtual machine instances. Additionally, in the future, a VCN peering will be required to allow connectivity between the VCNs.
Which of the following are valid IP ranges to consider? (Choose the best answer.)
- A. 10.0.0.0/16 and 10.0.64.0/24
- B. 10.0.0.0/8 and 11.0.0.0/8
- C. 10.0.8.0/21 and 10.0.16.0/22
- D. 10.0.0.0/30 and 192.168.0.0/30
Answer: A
NEW QUESTION 28
You are asked to deploy a new application that has been designed to scale horizontally. The business stakeholders have asked that theapplication be deployed in us-phoenix-1.
Normal usage requires 2 OCPUs. You expect to have few spikes during the week, that will require up to 4 OCPUs, and a major usage uptick at the end of each month that will require 8 OCPUs.
What is the most cost-effective approach to implement a highly available and scalable solution? (Choose the best answer.)
- A. Create an instance pool with a VM.Standard2.2 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances, to handle the weekly spikes, and a maximum of 4 instances.
- B. Create an instance with 1 OCPU shape. Use the Resize Instance action to scale up to a larger shape when more resources are needed.
- C. Create an instance with 1 OCPU shape.Use a CLI script to clone it when more resources are needed.
- D. Create an instance pool with a VM.Standard2.1 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances and a maximum of 8 instances.
Answer: D
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/Content/Compute/References/computeshapes.htm#baremetalshapes__bm-stan
NEW QUESTION 29
You have been asked to investigate a potential security risk on your company's Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking throughthe audit logs for suspicious activity.
How can you retrieve the audit logs using the OCI Command Line Interface (CLI)? (Choose the best answer.)
- A. oci audit event list --end-time $end-time --compartment-id $compartment-id
- B. oci audit event list --start-time $start-time --end-time $end-time -- compartment-id $compartment-id
- C. oci audit event list --start-time $start-time --compartment-id $compartment-id
- D. oci audit event list --start-time $start-time --end-time $end-time --tenancy-id
$tenancy-id
Answer: B
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/tools/oci-cli/2.9.7/oci_cli_docs/cmdref/audit/event/list.html
NEW QUESTION 30
......
1z0-1067-22 Exam Dumps Pass with Updated 2022 Certified Exam Questions: https://freetorrent.pdfdumps.com/1z0-1067-22-valid-exam.html