100% Free Oracle Cloud 1Z0-1067-21 Dumps PDF Demo Cert Guide Cover
PDF Exam Material 2021 Realistic 1Z0-1067-21 Dumps Questions
NEW QUESTION 18
What is a key benefit of using Oracle Cloud Infrastructure's Resource Manager for your Terraform provisioning and management activities? (Choose the best answer.)
- A. Resource Manager has administrative privileges by design. Even if your IAM user does not have access, you can leverage Resource Manager to provision new resources to any compartment in the Tenancy.
- B. Resource Manager manages to Terraform state file for your infrastructure and locks the file so that only one job at a time can run on a given stack.
- C. You can use Resource Manager to apply patches to all existing Oracle Linux interfaces in a specified compartment.
- D. You can use Resource Manager to identify and maintain an inventory of all Compute and Database instances across your tenancy.
Answer: B
Explanation:
Explanation/Reference: https://docs.oracle.com/en-us/iaas/Content/ResourceManager/Concepts/ samplecomputeinstance.htm
NEW QUESTION 19
You have been asked to ensure that in-transit communication between an Oracle Cloud Infrastructure (OCI) compute instance and an on-premises server (192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a Dynamic IPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added.
What solution should you recommend? (Choose the best answer.)
- A. Advertise a 192.168.10.10/32 route over the VPN.
- B. The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.
- C. Advertise a 192.168.10.10/32 router over the FastConnect.
- D. The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.
Answer: B
NEW QUESTION 20
You have created a geolocation steering policy in the Oracle Cloud Infrastructure (OCI) Traffic Management service, with this configuration:
What happens to requests that originate in Africa? (Choose the best answer.)
- A. The traffic will be forwarded to Pool 1. If Pool 1 is not available, then it will be forwarded to Pool 2.
- B. The traffic will be forwarded randomly to any of the pools mentioned in the rules.
- C. The traffic will be forwarded at the same time to both Pool 1 and Pool 2.
- D. The traffic will be dropped.
Answer: A
NEW QUESTION 21
You created an Oracle Linux compute instance through the Oracle Cloud Infrastructure (OCI) management console then immediately realize you forgot to add an SSH key file. You notice that OCI compute service provides instance console connections that supports adding SSH keys for a running instance. Hence, you created the console connection for your Linux server and activated it using the connection string provided.
However, now you get prompted for a username and password to login.
What option should you recommend to add the SSH key to your running instance, while minimizing the administrative overhead? (Choose the best answer.)
- A. You need to modify the serial console connection string to include the identity file flag, -i to specify the SSH key to use.
- B. You need to terminate the running instance and recreate it by providing the SSH key file.
- C. You need to configure the boot loader to use ttyS0 as a console terminal on the VM.
- D. You need to reboot the instance from the console, boot into the bash shell in maintenance mode, and add SSH keys for the opc user.
Answer: A
Explanation:
Explanation/Reference: https://docs.oracle.com/en-us/iaas/Content/Compute/References/serialconsole.htm
NEW QUESTION 22
You have received an email from your manager to provision new resources on Oracle Cloud Infrastructure (OCI). When researching OCI, you determined that you should use OCI Resource Manager. Since this is a task that will be done multiple times for development, test, and production. You will need to create a command that can be re-used.
Which CLI command can be used in this situation? (Choose the best answer.)
- A. oci resource-manager stack create --compartment-id <compartment_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name Production stack build \
--description Creating new Production environment - B. oci resource-manager stack update --tenancy-id <tenancy_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name "Production stack build" \
--description Creating new Production environment - C. oci resource-manager stack update --compartment-id <compartment_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name "Production stack build" \
--description Creating new Production environment - D. oci resource-manager stack create --tenancy-id <tenancy_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name Production stack build \
--description Creating new Production environment
Answer: A
NEW QUESTION 23
You have been asked to update the lifecycle policy for object storage using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI).
Which command can successfully update the policy? (Choose the best answer.)
- A. oci os object-lifecycle-policy delete -ns <object_storage_namespace> -bn <bucket_name>
- B. oci os object-lifecycle-policy put -ns <object_storage_namespace> -bn <bucket_name> - -items
<json_formatted_lifecycle_policy> - C. oci os object-lifecycle-policy get -ns <object_storage_namespace> -bn <bucket_name>
- D. oci os object-lifecycle-policy put -ns <object_storage_namespace> -bn <bucket_name>
Answer: B
NEW QUESTION 24
You have set an alarm to be generated when the CPU usage of a specified instance is greater than 10%. In the alarm behavior view below you notice that the critical condition happened around 23:30. You were expecting a notification after 1 minute, however, the alarm firing state did not begin until 23:33.
What should you change to fix it? (Choose the best answer.)
- A. Change the alarm's trigger delay minutes value to 1.
- B. Change the notification topic that you previously associated with the alarm.
- C. Change the alarm condition to be grater than 3%.
- D. Change the alarm's metric interval to 1.
Answer: A
NEW QUESTION 25
You have a 750 MIB file in an Oracle Cloud Infrastructure (OCI) Object Storage bucket. You want to download the file in multiple parts to speed up the download using the OCI CLI. You also want to configure each part size to be 128 MIB.
Which is the correct OCI CLI command for this operation? (Choose the best answer.) oci os object get -ns my-namespace -bn my-bucket --name my-large-object --
- A. --resume-put --multipart-download-threshold 500 --part-size 128
oci os object get -ns my-namespace -bn my-bucket --name my-large-object -- - B. multipart-download-threshold 750 --parallel-download-count 128
oci os object download -ns my-namespace -bn my-bucket --name my-large-object - C. multipart-download-threshold 500 --part-size 128
- D. --multipart-download-threshold 750 --parallel-download-count 128
oci os object download -ns my-namespace -bn my-bucket --name my-large-object
Answer: C
Explanation:
Explanation/Reference: https://docs.oracle.com/en-us/iaas/Content/API/SDKDocs/cliusing.htm
NEW QUESTION 26
You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively.
You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us-phoenix-1 region only and not any other OCI regions.
What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.) Allow group PHX-Admins to manage all-resources in tenancy where
- A. request.target= 'phx'
Allow group PHX-Admins to manage all-resources in tenancy where - B. request.location= 'phx'
- C. request.permission= 'phx'
Allow group PHX-Admins to manage all-resources in tenancy where - D. request.region= 'phx'
Allow group PHX-Admins to manage all-resources in tenancy where
Answer: D
NEW QUESTION 27
Security Testing Policy describes when and how you may conduct certain types of security testing of Oracle Cloud Services, including vulnerability and penetration tests, as well as tests involving data scraping tools.
What does Oracle allow as part of this testing? (Choose the best answer.)
- A. Customers are allowed to use their own testing and monitoring tools.
- B. Customers are allowed to test Oracle Cloud Infrastructure (OCI) hardware related to resources in their tenancy.
- C. Customers can validate that their network resources are isolated from other customer resources.
- D. Customers can simulate DoS attack scenarios as long as it's restricted to the customer's own environment.
Answer: B
Explanation:
Explanation/Reference: https://docs.oracle.com/en-us/iaas/Content/Security/Concepts/security_testing-policy.htm
NEW QUESTION 28
You are launching a Windows server in your Oracle Cloud Infrastructure (OCI) tenancy. You provided a startup script during instance initialization, but it was not executed successfully.
What is a possible reason for this error? (Choose the best answer.)
- A. Specified a #directive on the first line of your script.
- B. Ran a cloudbase-init script instead of cloud-init.
- C. Didn't include anything in user_data.
- D. Wrote a custom script which tried to install GPU drivers.
Answer: B
NEW QUESTION 29
You are using Oracle Cloud Infrastructure (OCI) console to set up an alarm on a budget to track your OCI spending.
Which two are valid targets for creating a budget in OCI? (Choose two.)
- A. Select user as the type of target for your budget.
- B. Select Tenancy as the type of target for your budget.
- C. Select group as the type of target for your budget.
- D. Select Compartment as the type of target for your budget.
- E. Select Cost-Tracking Tags as the type of target for your budget.
Answer: D,E
NEW QUESTION 30
You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively.
You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us-phoenix-1 region only and not any other OCI regions.
What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.)
- A. Allow group PHX-Admins to manage all-resources in tenancy where request.permission= 'phx'
- B. Allow group PHX-Admins to manage all-resources in tenancy where request.region= 'phx'
- C. Allow group PHX-Admins to manage all-resources in tenancy where request.location= 'phx'
- D. Allow group PHX-Admins to manage all-resources in tenancy where request.target= 'phx'
Answer: B
NEW QUESTION 31
Multiple teams are sharing a tenancy in Oracle Cloud Infrastructure (OCI). You are asked to figure out an appropriate method to manage OCI costs.
Which is NOT a valid technique to accurately attribute costs to resources used by each team? (Choose the best answer.)
- A. Create an Identity and Access Management (IAM) group for each team. Create an OCI budget for each group to track spending.
- B. Create a Cost-Tracking tag. Apply this tag to all resources with team information. Use the OCI cost analysis tools to filter costs by tags.
- C. Create separate compartment for each team. Use the OCI cost analysis tools to filter costs by compartment.
- D. Define and use tags for resources used by each team. Analyze usage data from the OCI Usage Report which has detailed information about resources and tags.
Answer: A
NEW QUESTION 32
You have recently been asked to take over management of your company's infrastructure provisioning efforts, utilizing Terraform v0.12 to provision and manage infrastructure resources in Oracle Cloud Infrastructure (OCI).
For the past few days the development environments have been failing to provision. Terraform returns the following error:
You locate the related code block in the Terraform config and find the following:
Which correction should you make to solve this issue? (Choose the best answer.)
- A. Modify line 15 to be the following:
tcp_options = {min = "22", max = "22") - B. Replace the curly braces '{ }' in lines 11 and 16 with square braces '[ ]'
- C. Place a command at the end of line 16
- D. Modify line 15 to be the following:
tcp_options {
min = "22"
max = "22"
}
Answer: A
NEW QUESTION 33
You have been monitoring your company's applications running in Oracle Cloud Infrastructure (OCI) and notice that the application is using OCI Traffic Management service. This service uses a traffic steering policy to distribute the DNS traffic based on subnet addresses in a rule set.
Which steering policy is in use in this particular case? (Choose the best answer.)
- A. IP Prefix steering
- B. ASN steering policy
- C. Geolocation steering
- D. Load Balancing policy
Answer: B
NEW QUESTION 34
You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:
You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet.
Which action would you take to accomplish the task? (Choose the best answer.)
- A. Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the instance that hosts the company website.
- B. In default security list, add a stateful rule to allow ingress access on port 443.
- C. Create a new security list with a stateful rule to allow ingress access on port 443 and associate it to the public subnet.
- D. Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the public subnet that hosts the company website.
Answer: A
NEW QUESTION 35
Which technique does NOT help you get the optimal performance out of the Oracle Cloud Infrastructure (OCI) File Storage service? (Choose the best answer.)
- A. Increase concurrency by using multiple threads, multiple clients, and multiple mount targets.
- B. Limit access to the same Availability Domain (AD) as the File Storage service where possible.
- C. Serialize operations to the file system to access consecutive blocks as much as possible.
- D. Right size compute instances from where file system is accessed based on their network capacity.
Answer: A
Explanation:
Section: (none)
Explanation
NEW QUESTION 36
You have been asked to investigate a potential security risk on your company's Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking through the audit logs for suspicious activity.
How can you retrieve the audit logs using the OCI Command Line Interface (CLI)? (Choose the best answer.)
- A. oci audit event list --start-time $start-time --end-time $end-time -- compartment-id $compartment-id
- B. oci audit event list --start-time $start-time --compartment-id $compartment-id
- C. oci audit event list --start-time $start-time --end-time $end-time --tenancy-id
- D. oci audit event list --end-time $end-time --compartment-id $compartment-id
Answer: A
Explanation:
$tenancy-id
NEW QUESTION 37
Security Testing Policy describes when and how you may conduct certain types of security testing of Oracle Cloud Services, including vulnerability and penetration tests, as well as tests involving data scraping tools.
What does Oracle allow as part of this testing? (Choose the best answer.)
- A. Customers are allowed to use their own testing and monitoring tools.
- B. Customers are allowed to test Oracle Cloud Infrastructure (OCI) hardware related to resources in their tenancy.
- C. Customers can validate that their network resources are isolated from other customer resources.
- D. Customers can simulate DoS attack scenarios as long as it's restricted to the customer's own environment.
Answer: B
NEW QUESTION 38
You have ordered two FastConnect connections that provide a high availability connection architecture between your on-premises data center and Oracle Cloud Infrastructure (OCI). You want to run these connections in an ACTIVE/PASSIVE architecture.
How can you accomplish this? (Choose the best answer.)
- A. Decrease the prefix length of AS for the FastConnect you want to use as PASSIVE connection.
- B. Use AS PATH prepending with your routes.
- C. Enable BGP on the FastConnect that you want as the ACTIVE connection.
- D. Adjust one of the connections to have a higher ASN.
Answer: B
Explanation:
Explanation/Reference: https://docs.oracle.com/en-us/iaas/Content/Resources/Assets/whitepapers/connectivity- redundancy-guide.pdf (5)
NEW QUESTION 39
A developer has created a file system in Oracle Cloud Infrastructure (OCI) File Storage service. She launches an Oracle Linux compute instance and successfully mounts the file system from the instance.
She then tries writing to the file system from the compute instance using the following command:
touch /mnt/yourmountpoint/helloworld
But gets an error message:
touch: cannot touch '/mnt/yourmountpoint/helloworrld': Permission denied Which is a reason for this error? (Choose the best answer.)
- A. User is not part of any OCI Identity and Access Management group with write permissions to File Storage service.
- B. 'touch' command is not available in Oracle Linux by default.
- C. Service limits or quota for file system writes have been breached.
- D. User is connecting as the default Oracle Linux user 'opc' instead of 'root' user.
Answer: A
Explanation:
Explanation/Reference: https://itectec.com/unixlinux/touch-cannot-touch-test-permission-denied/
NEW QUESTION 40
Here is a partial code from a Terraform template written for Oracle Cloud Infrastructure (OCI):
What operation(s) does it perform? (Choose the best answer.)
- A. Provides object read and write access for an OCI Object Storage bucket.
- B. Creates a URL to provide access to an OCI Object Storage bucket for managing objects.
- C. Creates a lifecycle policy for an OCI Object Storage bucket for moving data to Archival storage at a specified time.
- D. Creates a pre-authenticated request for objects in an OCI Object Storage bucket.
Answer: A
NEW QUESTION 41
Your customer is running a set of compute instances inside a private subnet to manage their workloads on Oracle Cloud Infrastructure (OCI) tenancy. You have set up auto scaling feature to provide consistent performance to their end users during period of high demand.
Which step should be met for auto scaling to work? (Choose the best answer.)
- A. Audit logs for the instances should be enabled.
- B. Monitoring for the instances should not be enabled.
- C. OS Management Service agent (osms) must be installed on the instances.
- D. Service gateway should be setup to allow instances to send metrics to monitoring service.
Answer: A
NEW QUESTION 42
You have set an alarm to be generated when the CPU usage of a specified instance is greater than 10%. In the alarm behavior view below you notice that the critical condition happened around 23:30. You were expecting a notification after 1 minute, however, the alarm firing state did not begin until 23:33.
What should you change to fix it? (Choose the best answer.)
- A. Change the alarm's trigger delay minutes value to 1.
- B. Change the notification topic that you previously associated with the alarm.
- C. Change the alarm condition to be grater than 3%.
- D. Change the alarm's metric interval to 1.
Answer: A
NEW QUESTION 43
......
Updated Oracle 1Z0-1067-21 Dumps – PDF & Online Engine: https://www.actualvce.com/Oracle/1Z0-1067-21-valid-vce-dumps.html