1Z0-1067-21 Dumps for Pass Guaranteed - Pass 1Z0-1067-21 Exam 2021
1Z0-1067-21 Exam Dumps - Try Best 1Z0-1067-21 Exam Questions from Training Expert VCE4Dumps
Oracle 1Z0-1067-21 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
| Topic 10 |
|
NEW QUESTION 29
You are asked to deploy a new application that has been designed to scale horizontally. The business stakeholders have asked that the application be deployed in us-phoenix-1.
Normal usage requires 2 OCPUs. You expect to have few spikes during the week, that will require up to 4 OCPUs, and a major usage uptick at the end of each month that will require 8 OCPUs.
What is the most cost-effective approach to implement a highly available and scalable solution? (Choose the best answer.)
- A. Create an instance with 1 OCPU shape. Use a CLI script to clone it when more resources are needed.
- B. Create an instance pool with a VM.Standard2.2 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances, to handle the weekly spikes, and a maximum of 4 instances.
- C. Create an instance with 1 OCPU shape. Use the Resize Instance action to scale up to a larger shape when more resources are needed.
- D. Create an instance pool with a VM.Standard2.1 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances and a maximum of 8 instances.
Answer: B
NEW QUESTION 30
You created an Oracle Linux compute instance through the Oracle Cloud Infrastructure (OCI) management console then immediately realize you forgot to add an SSH key file. You notice that OCI compute service provides instance console connections that supports adding SSH keys for a running instance. Hence, you created the console connection for your Linux server and activated it using the connection string provided.
However, now you get prompted for a username and password to login.
What option should you recommend to add the SSH key to your running instance, while minimizing the administrative overhead? (Choose the best answer.)
- A. You need to modify the serial console connection string to include the identity file flag, -i to specify the SSH key to use.
- B. You need to configure the boot loader to use ttyS0 as a console terminal on the VM.
- C. You need to terminate the running instance and recreate it by providing the SSH key file.
- D. You need to reboot the instance from the console, boot into the bash shell in maintenance mode, and add SSH keys for the opc user.
Answer: A
Explanation:
Explanation/Reference: https://docs.oracle.com/en-us/iaas/Content/Compute/References/serialconsole.htm
NEW QUESTION 31
You are working as a Cloud Operations Administrator for your company. They have different Oracle Cloud Infrastructure (OCI) tenancies for development and production workloads. Each tenancy has resources in two regions - uk-london-1 and eu-frankfurt-1. You are asked to manage all resources and to automate all the tasks using OCI Command Line Interface (CLI).
Which is the most efficient method to manage multiple environments using OCI CLI? (Choose the best answer.)
- A. Use different bash terminals for each environment.
- B. Use OCI CLI profiles to create multiple sets of credentials in your config file, and reference the appropriate profile at runtime.
- C. Run oci setup config to create new credentials for each environment every time you want to access the environment.
- D. Create environment variables for the sets of credentials that align to each combination of tenancy, region, and environment.
Answer: D
NEW QUESTION 32
The boot volume on your Oracle Linux instance has run out of space. Your application has crashed due to a lack of swap space, forcing you to increase the size of the boot volume.
Which step should NOT be included in the process used to solve the issue? (Choose the best answer.)
- A. Reattach the boot volume and restart the instance.
- B. Create a RAID 0 configuration to extend the boot volume file system onto another block volume.
- C. Stop the instance and detach the boot volume.
- D. Attach the resized boot volume to a second instance as a data volume; extend the partition and grow the file system in the resized boot volume.
- E. Resize the boot volume by specifying a larger value than the boot volume's current size.
Answer: D
NEW QUESTION 33
You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG: NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:
However, after checking the bastion host logs, you discovered that there are IP addresses other than your own that can access your bastion host.
What is the root cause of this issue? (Choose the best answer.)
- A. A netmask of /32 allows all IP address in the 140.19.2.0 network, other than your IP 140.19.2.140
- B. All compute instances associated with NSG-050504 are also able to connect to the bastion host.
- C. The Security List allows access to all IP address which overrides the Network Security Group ingress rules.
- D. The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.
Answer: B
NEW QUESTION 34
A developer has created a file system in Oracle Cloud Infrastructure (OCI) File Storage service. She launches an Oracle Linux compute instance and successfully mounts the file system from the instance.
She then tries writing to the file system from the compute instance using the following command:
touch /mnt/yourmountpoint/helloworld
But gets an error message:
touch: cannot touch '/mnt/yourmountpoint/helloworrld': Permission denied Which is a reason for this error? (Choose the best answer.)
- A. 'touch' command is not available in Oracle Linux by default.
- B. Service limits or quota for file system writes have been breached.
- C. User is not part of any OCI Identity and Access Management group with write permissions to File Storage service.
- D. User is connecting as the default Oracle Linux user 'opc' instead of 'root' user.
Answer: C
NEW QUESTION 35
You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively.
You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us-phoenix-1 region only and not any other OCI regions.
What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.)
- A. Allow group PHX-Admins to manage all-resources in tenancy where request.region= 'phx'
- B. Allow group PHX-Admins to manage all-resources in tenancy where request.location= 'phx'
- C. Allow group PHX-Admins to manage all-resources in tenancy where request.permission= 'phx'
- D. Allow group PHX-Admins to manage all-resources in tenancy where request.target= 'phx'
Answer: A
NEW QUESTION 36
You have been asked to ensure that in-transit communication between an Oracle Cloud Infrastructure (OCI) compute instance and an on-premises server (192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a Dynamic IPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added.
What solution should you recommend? (Choose the best answer.)
- A. The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.
- B. The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.
- C. Advertise a 192.168.10.10/32 router over the FastConnect.
- D. Advertise a 192.168.10.10/32 route over the VPN.
Answer: A
NEW QUESTION 37
Which statement about Oracle Cloud Infrastructure paravirtualized block volume attachments is TRUE? (Choose the best answer.)
- A. Paravirtualized volumes may reduce the maximum IOPS performance for larger block volumes.
- B. Paravirtualized is required to manage iSCSI configuration for virtual machine instances.
- C. Paravirtualized volumes become immediately available on bare metal compute instances.
- D. Paravirtualization utilizes the internal storage stack of compute instance OS and network hardware virtualization to access block volumes.
Answer: A
NEW QUESTION 38
You have created a geolocation steering policy in the Oracle Cloud Infrastructure (OCI) Traffic Management service, with this configuration:
What happens to requests that originate in Africa? (Choose the best answer.)
- A. The traffic will be dropped.
- B. The traffic will be forwarded at the same time to both Pool 1 and Pool 2.
- C. The traffic will be forwarded randomly to any of the pools mentioned in the rules.
- D. The traffic will be forwarded to Pool 1. If Pool 1 is not available, then it will be forwarded to Pool 2.
Answer: D
NEW QUESTION 39
One of the compute instances that you have deployed on Oracle Cloud Infrastructure (OCI) is malfunctioning. You have created a console connection to remotely troubleshoot it.
Which two statements about console connections are TRUE? (Choose two.)
- A. It is not possible to connect to the serial console to an instance running Microsoft Windows, however VNC console connection can be used.
- B. VNC console connection uses SSH port forwarding to create a secure connection from your local system to the VNC server attached to your instance's console.
- C. If you do not disconnect from the session, your serial console connection will automatically be terminated after 24 hours.
- D. It is not possible to use VNC console connections to connect to Bare Metal Instances.
- E. For security purpose, the console connection will not let you edit system configuration files.
Answer: B,C
NEW QUESTION 40
You have been asked to investigate a potential security risk on your company's Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking through the audit logs for suspicious activity.
How can you retrieve the audit logs using the OCI Command Line Interface (CLI)? (Choose the best answer.) oci audit event list --end-time $end-time --compartment-id $compartment-id
- A. oci audit event list --start-time $start-time --end-time $end-time --
- B. compartment-id $compartment-id
oci audit event list --start-time $start-time --end-time $end-time --tenancy- - C. id $tenancy-id
- D. oci audit event list --start-time $start-time --compartment-id $compartment-id
Answer: B
NEW QUESTION 41
Which two statements are TRUE about Object Storage data security and encryption in Oracle Cloud Infrastructure (OCI)? (Choose two.)
- A. A VPN connection to OCI is required to ensure secure data transfer to an object storage bucket.
- B. Data needs to be decrypted on the client side before retrieving it.
- C. All traffic to and from Object Storage service is encrypted using TLS.
- D. Client-side encryption is managed by the customer.
- E. OCI Vault Management is used by default to provide data security.
Answer: C,D
NEW QUESTION 42
You have a group pf developers who launch multiple VM.Standard2.2 compute instances every day into the compartment Dev. As a result, your OCI tenancy quickly hit the service limit for this shape. Other groups can no longer create new instances using VM.Standard2.2 shape.
Because of this, your company has issued a new mandate that the Dev compartment must include a quota to allow for use of only 20 VM.Standard2.2 shapes per Availability Domain. Your solution should not affect any other compartment in the tenancy.
Which quota statement should be used to implement this new requirement? (Choose the best answer.)
- A. set compute quota vm-standard2-2-count to 20 in compartment dev
- B. zero compute quotas in tenancy
set compute quota vm-standard2-2-count to 20 in tenancy dev - C. zero compute quotas in tenancy
set compute quota vm-standard2-2-count to 20 in compartment dev - D. set compute quota vm-standard2-2count to 10 in compartment dev where request.region = us-phoenix-1
Answer: D
NEW QUESTION 43
You have the following compartment structure within your company's Oracle Cloud Infrastructure (OCI) tenancy:
You want to create a policy in the root compartment to allow SystemAdmins to manage VCNs only in CompartmentC.
Which policy is correct? (Choose the best answer.)
- A. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentC
- B. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentB:CompartmentC
- C. Allow group SystemAdmins to manage virtual-network-family in compartment Root
- D. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentA:CompartmentB:CompartmentC
Answer: A
NEW QUESTION 44
You have created a geolocation steering policy in the Oracle Cloud Infrastructure (OCI) Traffic Management service, with this configuration:
What happens to requests that originate in Africa? (Choose the best answer.)
- A. The traffic will be dropped.
- B. The traffic will be forwarded at the same time to both Pool 1 and Pool 2.
- C. The traffic will be forwarded randomly to any of the pools mentioned in the rules.
- D. The traffic will be forwarded to Pool 1. If Pool 1 is not available, then it will be forwarded to Pool 2.
Answer: D
NEW QUESTION 45
A subscriber of an Oracle Cloud Infrastructure (OCI) Notifications service topic complained about not receiving messages from the service.
Which option can help you debug this issue? (Choose the best answer.)
- A. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service drops the message. Confirm that the subscriber is always online to receive messages to help debug the issue.
- B. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to two hours. Configure an alarm on the NumberOfNotificationFailed metric through the OCI Monitoring service to help debug the issue.
- C. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to one day. Make sure that the subscriber is online at least once a day to help debug the issue.
- D. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, check the NumberOfNotificationFailed metric through the OCI Monitoring service for failed messages. Copy these messages to an OCI Object Storage bucket. Make sure the subscriber has the required credentials to access this bucket to help debug the issue.
Answer: B
NEW QUESTION 46
You have recently been asked to take over management of your company's infrastructure provisioning efforts, utilizing Terraform v0.12 to provision and manage infrastructure resources in Oracle Cloud Infrastructure (OCI).
For the past few days the development environments have been failing to provision. Terraform returns the following error:
You locate the related code block in the Terraform config and find the following:
Which correction should you make to solve this issue? (Choose the best answer.)
- A. Modify line 15 to be the following:
tcp_options {
min = "22"
max = "22"
} - B. Replace the curly braces '{ }' in lines 11 and 16 with square braces '[ ]'
- C. Modify line 15 to be the following:
tcp_options = {min = "22", max = "22") - D. Place a command at the end of line 16
Answer: C
NEW QUESTION 47
You have recently joined a startup company and quickly find that nobody is tracking the amount of money spent on Oracle Cloud Infrastructure (OCI). Seeing an opportunity to help save money you begin creating a solution to better track the cost of resources provisioned by each individual on the team.
Which option allows you to identify excessive spend across all resources in your tenancy? (Choose the best answer.)
- A. Create a tag namespace named BILLING with a Tag Key named CostCenter. Tag each of your resources with this Tag Key and the correct value.
- B. Use the Events Service and create rules that will act when a new Object Storage bucket or Compute Instance has been created. Have the rule email you each time one of these events occurs.
- C. Use the Python SDK to write a custom application that will monitor the Audit log. Look for CREATE events and configure the application to send you an email each time a new resource is created.
- D. Create a budget for each compartment that will send a notification when monthly spend reaches a pre- defined amount.
Answer: D
NEW QUESTION 48
Security Testing Policy describes when and how you may conduct certain types of security testing of Oracle Cloud Services, including vulnerability and penetration tests, as well as tests involving data scraping tools.
What does Oracle allow as part of this testing? (Choose the best answer.)
- A. Customers can validate that their network resources are isolated from other customer resources.
- B. Customers can simulate DoS attack scenarios as long as it's restricted to the customer's own environment.
- C. Customers are allowed to test Oracle Cloud Infrastructure (OCI) hardware related to resources in their tenancy.
- D. Customers are allowed to use their own testing and monitoring tools.
Answer: C
Explanation:
Explanation/Reference: https://docs.oracle.com/en-us/iaas/Content/Security/Concepts/security_testing-policy.htm
NEW QUESTION 49
You run a large global application with 90% of customers based in the US and Canad a. You want to be able to test a new feature and allow a small percentage of users to access the new version of your application.
What Oracle Cloud Infrastructure Traffic Management steering policy should you utilize? (Choose the best answer.)
- A. Geolocation steering
- B. Load Balancer
- C. ASN steering
- D. IP Prefix steering
Answer: A
NEW QUESTION 50
You have created the following JSON file to specify a lifecycle policy for one of your object storage buckets:
How will this policy affect the objects that are stored in the bucket? (Choose the best answer.)
- A. Objects containing the name prefix LOGS will be automatically migrated from standard Storage to Archive storage 30 days after the creation date. The object will be migrated back to standard Storage 120 days after creation.
- B. Objects containing the name prefix LOGS will be automatically migrated from standard Storage to Archive storage 30 days after the creation date. The object will be deleted 120 days after creation.
- C. Objects with the prefix "LOGS" will be retained for 120 days and then deleted permanently.
- D. The objects with prefix "LOGS" will be deleted 30 days after creation date.
Answer: B
NEW QUESTION 51
You have been asked to set up connectivity between a client's on-premises network and Oracle Cloud Infrastructure (OCI). The requirements are:
Low latency: The applications are financial and require low latency connectivity into OCI. Consistency: The application isn't tolerant of performance variation.
Performance: The communications link needs to support up to 1.25 Gbps.
Encryption: The communications link needs to encrypt any data in transit between the on-premises network and OCI Virtual Cloud Network (VCN).
The client wants to implement the above with as low a cost as possible, while meeting all of the requirements. What should you suggest? (Choose the best answer.)
- A. Provision FastConnect with a single private virtual circuit.
- B. Provision FastConnect with a single public virtual circuit.
- C. Provision FastConnect with a single private virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.
- D. Provision FastConnect with a single public virtual circuit, and run an IPsec VPN tunnel over the top of this
- E. Provision a site-to-site IPsec VPN between your on-premises network and your virtual cloud network (VCN) using VPN Connect.
Answer: A
Explanation:
virtual circuit.
NEW QUESTION 52
You have been monitoring your company's applications running in Oracle Cloud Infrastructure (OCI) and notice that the application is using OCI Traffic Management service. This service uses a traffic steering policy to distribute the DNS traffic based on subnet addresses in a rule set.
Which steering policy is in use in this particular case? (Choose the best answer.)
- A. ASN steering policy
- B. IP Prefix steering
- C. Geolocation steering
- D. Load Balancing policy
Answer: A
NEW QUESTION 53
You are using the Oracle Cloud Infrastructure Command Line Interface to launch a Linux virtual machine. You enter the following command (with correct values for all parameters):
The command fails.
Which is NOT a valid parameter in this command? (Choose the best answer.)
- A. - -image-id <image_id>
- B. - -shape "<shape_name>"
- C. -t <tenancy_id>
- D. - -subnet-id <subnet_id>
- E. -c <compartment_id>
Answer: C
NEW QUESTION 54
......
Latest 100% Passing Guarantee - Brilliant 1Z0-1067-21 Exam Questions PDF: https://www.vce4dumps.com/1Z0-1067-21-valid-torrent.html