Free 1z0-1067-22 Exam Braindumps certification guide Q&A
1z0-1067-22 Certification Overview Latest 1z0-1067-22 PDF Dumps
NEW QUESTION 17
You have received an email from your manager to provision new resources on Oracle Cloud Infrastructure (OCI). When researching OCI, you determined that you should use OCI Resource Manager. Since this is a task that will be done multiple times for development, test, and production. You will need to create a command that can be re-used.
Which CLI command can be used in this situation? (Choose the best answer.)
- A. oci resource-manager stack create --tenancy-id <tenancy_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name Production stack build \
--description Creating new Production environment - B. oci resource-manager stack update --tenancy-id <tenancy_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name "Production stack build" \
--description Creating new Production environment - C. oci resource-manager stack update --compartment-id <compartment_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name "Production stack build" \
--description Creating new Production environment - D. oci resource-manager stack create --compartment-id <compartment_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name Production stack build \
--description Creating new Production environment
Answer: D
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/tools/oci-cli/3.0.2/oci_cli_docs/cmdref/resource-manager/stack/create.html
NEW QUESTION 18
You have recently been asked to take over management of your company's infrastructure provisioning efforts, utilizing Terraform v0.12 to provision and manage infrastructure resources in Oracle Cloud Infrastructure (OCI). For the past fewdays the development environments have been failing to provision. Terraform returns the following error:
You locate the related code block in the Terraform config and find the following:
Which correction should you make to solve this issue? (Choosethe best answer.)
- A. Replace the curly braces '{ }' inlines 11 and 16 with square braces '[ ]'
- B. Place a command at the end of line 16
- C. Modify line 15 to be the following:
tcp_options { min = "22"
max = "22"
} - D. Modify line 15 to be the following:
tcp_options = {min = "22", max = "22")
Answer: C
NEW QUESTION 19
The boot volume on your Oracle Linux instance has run out of space. Your application has crashed due to a lack of swap space, forcing you to increase the size ofthe boot volume.
Which step should NOT be included in the process used to solve the issue? (Choose the best answer.)
- A. Reattach the boot volume and restart the instance.
- B. Resize the boot volume by specifying a larger value than the boot volume's current size.
- C. Attach the resized boot volume to a second instance as a data volume; extend the partition and grow the file system in the resized boot volume.
- D. Stop the instance and detach the boot volume.
- E. Create a RAID 0 configuration to extend the boot volume file system onto another block volume.
Answer: C
NEW QUESTION 20
You are working with Terraform on your laptop and have been tasked with spinning up multiple compute instances in Oracle Cloud Infrastructure (OCI) for a project. In addition, you are also required tocollect IP addresses of provisioned instances and write them to a file and save it in your laptop.
Which specific Terraform functionality can help accomplish this task? (Choose the best answer.)
- A. Terraform local-exec
- B. Terraform remote-exec
- C. Terraform modules
- D. Terraform remote state
Answer: B
Explanation:
Explanation
https://www.terraform.io/docs/language/resources/provisioners/remote-exec.html
NEW QUESTION 21
Which option contains the essential components of the Oracle Cloud Infrastructure Notifications service?
(Choose the best answer.)
- A. An ALARM with a name unique across the tenancy, a SUBSCRIPTION, and a METRIC with the measurement of interest.
- B. An ALARM with a name unique across thecompartment, a SUBSCRIPTION, and a METRIC with the measurement of interest.
- C. A TOPIC with a name unique across the compartment, a SUBSCRIPTION, and a MESSAGE where content is published.
- D. A TOPIC with a name unique across the tenancy, a SUBSCRIPTION, and a MESSAGE where content is published.
Answer: D
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/Content/Notification/Concepts/notificationoverview.htm
https://docs.oracle.com/en-us/iaas/Content/Notification/Tasks/managingtopicsandsubscriptions.htm
NEW QUESTION 22
You havecreated a geolocation steering policy in the Oracle Cloud Infrastructure (OCI) Traffic Management service, with this configuration:
What happens to requests that originate in Africa? (Choose the best answer.)
- A. The traffic will be forwarded to Pool 1. If Pool 1 is not available, then it will be forwarded toPool 2.
- B. The traffic will be forwarded randomly to any of the pools mentioned in the rules.
- C. The traffic will be dropped.
- D. The traffic will be forwarded at the same time to both Pool 1 and Pool 2.
Answer: B
Explanation:
Explanation
This policy currently has no global catch-all. No global catch-all means that queries not matching any of the above rules will receive a random answer. Global Catche-all need to set up if the traffic does not meet any condition in the pool and you still want to serve the request. Default is serve randomly.
https://www.oracle.com/a/ocom/docs/cloud/traffic-management-100.pdf
NEW QUESTION 23
You have been asked to update the lifecycle policy for object storage using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI).
Which command can successfully update the policy? (Choose the bestanswer.)
- A. oci os object-lifecycle-policy put -ns <object_storage_namespace> -bn <bucket_name> - -items
<json_formatted_lifecycle_policy> - B. oci os object-lifecycle-policy delete -ns <object_storage_namespace> -bn <bucket_name>
- C. oci os object-lifecycle-policy put -ns <object_storage_namespace> -bn <bucket_name>
- D. oci os object-lifecycle-policy get -ns <object_storage_namespace> -bn <bucket_name>
Answer: A
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/Content/Object/Tasks/usinglifecyclepolicies.htm#cli
https://docs.oracle.com/en-us/iaas/tools/oci-cli/2.17.0/oci_cli_docs/cmdref/os/object-lifecycle-policy/put.html
NEW QUESTION 24
You have a 750 MIB file in an Oracle Cloud Infrastructure (OCI)Object Storage bucket. You want to download the file in multiple parts to speed up the download using the OCI CLI. You also want to configure each part size to be 128 MIB.
Which is the correct OCI CLI command for this operation? (Choose the best answer.)
- A. oci os object download -ns my-namespace -bn my-bucket --name my-large-object -- multipart-download-threshold 750 --parallel-download-count 128
- B. oci os object download -ns my-namespace -bn my-bucket --name my-large-object -- resume-put
--multipart-download-threshold 500 --part-size 128 - C. oci os object get -ns my-namespace -bn my-bucket --name my-large-object
--multipart-download-threshold 500 --part-size 128 - D. oci os object get -ns my-namespace -bn my-bucket --name my-large-object -- multipart-download-threshold 750 --parallel-download-count 128
Answer: C
Explanation:
Explanation
https://docs.public.oneportal.content.oci.oraclecloud.com/en-us/iaas/Content/API/SDKDocs/cliusing.htm
https://docs.oracle.com/en-us/iaas/tools/oci-cli/2.6.15/oci_cli_docs/cmdref/os/object/get.html
NEW QUESTION 25
You have been asked to ensure that in-transit communication between an OracleCloud Infrastructure (OCI) compute instance and an on-premises server (192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a DynamicIPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added.
What solution should you recommend? (Choose the best answer.)
- A. Advertise a 192.168.10.10/32 router over the FastConnect.
- B. The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.
- C. Advertise a 192.168.10.10/32 route over the VPN.
- D. The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.
Answer: C
Explanation:
Explanation
https://www.oracle.com/uk/cloud/networking/fastconnect-faq.html
NEW QUESTION 26
A subscriber of an Oracle Cloud Infrastructure (OCI) Notifications service topic complained about not receiving messages from the service.
Which optioncan help you debug this issue? (Choose the best answer.)
- A. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to two hours. Configure an alarm on the NumberOfNotificationFailed metric through the OCI Monitoring service to help debug the issue.
- B. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to one day. Make sure that the subscriber is online at least once a day to help debug the issue.
- C. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service drops the message. Confirm that the subscriber is always online to receive messages to help debug the issue.
- D. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, check the NumberOfNotificationFailed metric through the OCI Monitoring service for failed messages. Copy these messages to an OCI ObjectStorage bucket. Make sure the subscriber has the required credentials to access this bucket to help debug the issue.
Answer: A
Explanation:
Explanation
https://www.oracle.com/devops/notifications/faq/
When a subscriber's endpoint doesn't acknowledge receipt of a message, the service retries delivery and currently retains the message up to two hours from the time the message is published to a topic. The service tries to deliver messages within the retentionwindow.
NEW QUESTION 27
Your company hasrestructured its HR departments. As part of this change, you also need to re-organize compartments within Oracle Cloud Infrastructure (OCI) to align them to the company's new organizational structure. The following change is required:
Compartment Team_xneeds to be moved under a new parent compartment, Project_B The tenancy has the following policies defined for compartments Project_A and Project_B: Policy1: Allow group G1 to manage instance-family in compartment HR:Project_A Policy2: Allow group G2 tomanage instance-family in compartment HR:Project_B Which two statements describe the impacts after the compartment Team_x is moved? (Choose two.)
- A. Group G2 can now manage instance-families in compartment Project_A but not in compartment Team_x
- B. Group G1 can now manage instance-families in compartment Project_A but not in compartment Team_x
- C. Group G2 can now manage instance-families in compartment Project_B, compartment Project_A and compartment Team_X
- D. Group G2 can now manage instance-families in compartment Project_B and compartment Team_X
- E. Group G1 can now manage instance-families in compartment Project_A, compartment Project_B and compartment Team_X
Answer: B,D
NEW QUESTION 28
You have been asked to set up connectivity between a client's on-premises network and Oracle Cloud Infrastructure (OCI). The requirements are:
Low latency: The applications are financial and require low latency connectivity intoOCI. Consistency: The application isn't tolerant of performance variation.
Performance: The communications link needs to support up to 1.25 Gbps.
Encryption: The communications link needs to encrypt any data in transit between the on-premises network and OCI Virtual Cloud Network (VCN).
The client wants to implement the above with as low a cost as possible, while meeting all of the requirements.
What should you suggest? (Choose the best answer.)
- A. Provision a site-to-site IPsec VPN between your on-premises network and your virtual cloud network (VCN) using VPNConnect.
- B. Provision FastConnect with a single public virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.
- C. Provision FastConnect with a single private virtual circuit.
- D. Provision FastConnect with a single public virtual circuit.
- E. Provision FastConnect with a single private virtualcircuit, and run an IPsec VPN tunnel over the top of this virtual circuit.
Answer: B
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/Content/Resources/Assets/whitepapers/encrypted-fastconnect-public-peering.p
NEW QUESTION 29
Which two statements are TRUE about Object Storage data security and encryption in Oracle Cloud Infrastructure (OCI)? (Choose two.)
- A. Client-side encryption is managed by the customer.
- B. OCI Vault Management is used by default to provide data security.
- C. Data needs to be decrypted on the client side before retrieving it.
- D. A VPN connection to OCI is required to ensure secure data transfer to an object storage bucket.
- E. All traffic to and from Object Storage service is encrypted using TLS.
Answer: A,E
NEW QUESTION 30
You are asked to implement the disaster recovery (DR) and business continuity requirements for Oracle Cloud Infrastructure (OCI) Block Volumes. Two OCI regions being used: a primary/source region and a DR/destination region. The requirements are:
* There should be a copy of data in the destination region to use if a region-wide disaster occurs in the source region
* Minimize costs
Which design will help you meet these requirements? (Choose the best answer.)
- A. Clone block volumes. Copy block volume clonesfrom source region to destination region at regular intervals.
- B. Back up block volumes. Copy block volume backups from source region to destination region at regular intervals.
- C. Clone block volumes. Use Object Storage lifecycle management to automatically move clone objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.
- D. Back up block volumes. Use Object Storage lifecycle management to automatically move backup objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.
Answer: B
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/Content/Block/Tasks/copyingvolumebackupcrossregion.htm
NEW QUESTION 31
You have been asked to investigate a potential security risk on your company's Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking throughthe audit logs for suspicious activity.
How can you retrieve the audit logs using the OCI Command Line Interface (CLI)? (Choose the best answer.)
- A. oci audit event list --start-time $start-time --end-time $end-time -- compartment-id $compartment-id
- B. oci audit event list --end-time $end-time --compartment-id $compartment-id
- C. oci audit event list --start-time $start-time --end-time $end-time --tenancy-id
$tenancy-id - D. oci audit event list --start-time $start-time --compartment-id $compartment-id
Answer: A
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/tools/oci-cli/2.9.7/oci_cli_docs/cmdref/audit/event/list.html
NEW QUESTION 32
Your company recently adopted a hybrid cloud architecture which requires them to migrate some of their on- premises web applications to Oracle Cloud Infrastructure (OCI). You created a Terraform template which automatically provisions OCI resources such as compute instances, load balancer, and a database instance.
After running the stackusing the terraform apply command, it successfully launched the compute instances and the load balancer, but it failed to create a new database instance with the following error:
Service error: NotAuthorizedOrNotFound. shape VM.Standard2.4 not found. httpstatus code: 404 You discovered that the resource quotas assigned to your compartment prevent you from using VM.Standard2.4 instance shapes available in your tenancy. You edit the Terraform script and replace the shape with VM.Standard2.2 Which option would you recommend to re-run the terraform command to have required OCI resources provisioned with the least effort? (Choose the best answer.)
- A. terraform plan -target=oci_database_db_system.db_system
- B. terraform apply -auto-approve
- C. terraform refresh-target=oci_database_db_system.db_system
- D. terraform apply -target=oci_database_db_system.db_system
Answer: B
NEW QUESTION 33
You have been contracted by a local e-commerce company to assistwith enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet, and a database in a separate, private subnet.
The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically.
After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)
- A. Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A record. Inform customers to prepend the website URL with failover if the primary site is unavailable.
- B. Deploy a new load balancer in the primary region. Create one backend set for theprimary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.
- C. Create a failover policy in the Traffic Management service. Set the IP address of the public load balancerfor the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.
- D. Create a load balancer policy in the Traffic Management service. Configure one answerfor each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.
Answer: C
NEW QUESTION 34
You have been asked to review a network design for Oracle Cloud Infrastructure (OCI) by a major client. The client's IT team needs to provision two Virtual Cloud Networks (VCNs) for a major application. The application uses a large number of virtual machine instances. Additionally, in the future, a VCN peering will be required to allow connectivity between the VCNs.
Which of the following are valid IP ranges to consider? (Choose the best answer.)
- A. 10.0.0.0/8 and 11.0.0.0/8
- B. 10.0.0.0/30 and 192.168.0.0/30
- C. 10.0.0.0/16 and 10.0.64.0/24
- D. 10.0.8.0/21 and 10.0.16.0/22
Answer: C
NEW QUESTION 35
You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:
You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet.
Which actionwould you take to accomplish the task? (Choose the best answer.)
- A. In default security list,add a stateful rule to allow ingress access on port 443.
- B. Create a new security list with a stateful rule to allow ingress access on port 443 and associate it to the public subnet.
- C. Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the public subnet that hosts the company website.
- D. Create a network security group, add a stateful rule to allow ingressaccess on port 443 and associate it to the instance that hosts the company website.
Answer: D
Explanation:
Explanation
Since we want to avoid exposing other instances in the same public subnet to the internet, Network Security Groups (NSG) must be used instead of Security Lists. NSG are attached to the vnic of the instance and not to the subnet
NEW QUESTION 36
What is a key benefit of using Oracle Cloud Infrastructure's Resource Manager for your Terraform provisioning and management activities? (Choose the best answer.)
- A. You can useResource Manager to apply patches to all existing Oracle Linux interfaces in a specified compartment.
- B. Resource Manager manages to Terraform state file for your infrastructure andlocks the file so that only one job at a time can run on a given stack.
- C. Resource Manager has administrative privileges by design. Even if your IAM user does not have access, you can leverage Resource Manager to provision new resources to any compartment in the Tenancy.
- D. You can use Resource Manager to identify and maintain an inventory of all Compute and Database instances across your tenancy.
Answer: B
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/Content/ResourceManager/Concepts/resourcemanager.htm A Terraform configuration codifies your infrastructure in declarative configuration files. Resource Manager allows you to share and manage infrastructure configurations and state files across multiple teams and platforms. This infrastructure management can't be done with local Terraform installations and Oracle Terraform modules alone. For more information about the Oracle Cloud Infrastructure Terraform provider, see Terraform Provider.
NEW QUESTION 37
......
The Best Oracle 1z0-1067-22 Study Guides and Dumps of 2023: https://testking.exams-boost.com/1z0-1067-22-valid-materials.html