Try Oracle : 1Z1-1067 valid & accurate questions and answers

You launched a Linux compute Instance to host the new version of your company website via Apache HTTPS server on HTTPS (port 443).
The Instance is created in a public subnet along with other Instances. The default security list associated to the subnet is:

You want to allow access to the company website from public Internet without exposing websites eventually hosted on the other instances In the public subnet.
Which two actions should you do?

• A. Create a network security group, add a stateful rule to allow ingress access on port 443 and associate It to the public subnet that host the company website.
• B. Access the Linux instance via SSH and configure Iptables to allow HTTPS access on port 443.
• C. Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the instance that host the company website.
• D. In default security list, add a stateful rule to allow ingress access on port 443.
• E. Create a new security list with a stateful rule to allow ingress access on port 443 and associate it to the public subnet.

You are working as a Cloud Operations Administrator for your company. They have different Oracle Cloud Infrastructure (OCI) tenancies for development and production workloads. Each tenancy has resources in two regions - uk-london-1 and eu-frankfurt-1. You are asked to manage all resources and to automate all the tasks using OCI Command Line Interface (CLI).
Which is the most efficient method to manage multiple environments using OCI CLI?

• A. Run OCI setup config to create new credentials for each environment every time you want to access the environment.
• B. Use different bash terminals for each environment.
• C. Use OCI CLI profiles to create multiple set of credentials in your config file, and reference the appropriate profile at runtime.
• D. Create environment variables for the sets of credentials that align to each combination of tenancy, region, and environment.

To take advantage of cloud agility and burst computing capability, ABC Automobiles have extended their data center to a Virtual Cloud Network (VCN). In Oracle Cloud Infrastructure's (OCI) us-phoenlx-1 region. They have several members in their Cloud Operations (CloudOps) team that need I access the OCI management console. The security administrator does not want to create new IAM users and credentials that would then need to be distributed to each CloudOps member.
Which option will help solution architect meet the needs for CloudOps?

• A. Use on-premises SAML2.0 compliant identity provider(IdP) to retrieve an AuthToken to enable CloudOps members to sign in to the OCI Console.
• B. Use an existing SAMAL 2.0 compliant identity provider(IdP) to grant CloudOps members federated access to OCI Console via the OCI single sign-on (SSO) endpoint.
• C. Use Web Identity Federation to retrieve an AuthToken to enable CloudOps members to sign in to the OCI Console.
• D. Use OAuth 2.0 to retrieve temporary credentials to enable your CloudOps members to sign in to the OCI Console.

You have created several block volumes in the us-phoenix-1 region in a specific compartment. The compartment can be identified by the following Oracle Cloud Infrastructure (OCI) unique identifier, or ocid1.compartment.oc1.phx..exampleuniquelD Your manager has asked you to leverage the OCI monitoring service and write a metric query showing all read IOPS at a one-minute interval, filtered to this compartment and aggregated for the maximum.
Which metric query will you create?

• A. IopsWrite[lm]{compartmentId=Hocidl.compartment.ocl.phx..exampleuniquelD"}.mean()
• B. IopsRead[lm]{compartmentId="ocidl.compartment.ocl.phx..exampleuniquelD"}.grouplng().max()
• C. IopsRead[lm]{compartmentId="ocldl.compartment.ocl.phx..exampleuniquelD"}.max()
• D. IopsRead[lm]{compartmentId = "odd 1.compartment.ocl.phx..exampleuniquelD"}.grouping().mean()

You created an Oracle Linux compute Instance through the Oracle Cloud Infrastructure (OCI) management console then immediately realize you add an SSH key file. You notice that OCI compute service provides instance console connections that supports adding SSH keys for a running Instance. Hence, you created the console connection for your Linux server and activated it using the connection string provided. However, now you get' prompted for a username and password to login.
What option should you recommend to add the SSH key to your running Instance, while minimizing the administrative overhead?

• A. You need to terminate the running instance and recreate it by providing the SSH key file.
• B. You need to configure the boot loader to use ttyS0 as a console terminal on the VM.
• C. You need to modify the serial console connection string to include the identity file flag, -i to specify the SSH key to use.
• D. You need to reboot the instance from the console, boot into the bash shell In maintenance mode, and add SSH keys for the open user.