Free 1Z0-1067-21 Exam Dumps PDF Preview

Question 1

Single choice

You have been asked to ensure that in-transit communication between an Oracle Cloud Infrastructure (OCI) compute instance and an on-premises server (192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a Dynamic IPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added.

What solution should you recommend? (Choose the best answer.)

A
The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.
B
Advertise a 192.168.10.10/32 route over the VPN.
C
Advertise a 192.168.10.10/32 router over the FastConnect.
D
The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.

Reveal answer details Close answer details

Correct answerD

Explanation

References:
https://docs.oracle.com/en-us/iaas/Content/Network/Tasks/transitrouting.htm

Question 2

Single choice

You have received an email from your manager to provision new resources on Oracle Cloud Infrastructure (OCI). When researching OCI, you determined that you should use OCI Resource Manager. Since this is a task that will be done multiple times for development, test, and production. You will need to create a command that can be re-used.

Which CLI command can be used in this situation? (Choose the best answer.)

A
oci resource-manager stack create --tenancy-id <tenancy_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name Production stack build \
--description Creating new Production environment
B
oci resource-manager stack update --compartment-id <compartment_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name "Production stack build" \
--description Creating new Production environment
C
oci resource-manager stack create --compartment-id <compartment_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name Production stack build \
--description Creating new Production environment
D
oci resource-manager stack update --tenancy-id <tenancy_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name "Production stack build" \
--description Creating new Production environment

Reveal answer details Close answer details

Correct answerC

Question 3

Single choice

You are asked to deploy a new application that has been designed to scale horizontally. The business stakeholders have asked that the application be deployed in us-phoenix-1.

Normal usage requires 2 OCPUs. You expect to have few spikes during the week, that will require up to 4 OCPUs, and a major usage uptick at the end of each month that will require 8 OCPUs.

What is the most cost-effective approach to implement a highly available and scalable solution? (Choose the best answer.)

A
Create an instance pool with a VM.Standard2.2 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances, to handle the weekly spikes, and a maximum of 4 instances.
B
Create an instance with 1 OCPU shape. Use the Resize Instance action to scale up to a larger shape when more resources are needed.
C
Create an instance with 1 OCPU shape. Use a CLI script to clone it when more resources are needed.
D
Create an instance pool with a VM.Standard2.1 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances and a maximum of 8 instances.

Reveal answer details Close answer details

Correct answerA

Question 4

Single choice

You have created a geolocation steering policy in the Oracle Cloud Infrastructure (OCI) Traffic Management service, with this configuration:

What happens to requests that originate in Africa? (Choose the best answer.)

A
The traffic will be forwarded at the same time to both Pool 1 and Pool 2.
B
The traffic will be dropped.
C
The traffic will be forwarded randomly to any of the pools mentioned in the rules.
D
The traffic will be forwarded to Pool 1. If Pool 1 is not available, then it will be forwarded to Pool 2.

Reveal answer details Close answer details

Correct answerD

Question 5

Single choice

Security Testing Policy describes when and how you may conduct certain types of security testing of Oracle Cloud Services, including vulnerability and penetration tests, as well as tests involving data scraping tools.

What does Oracle allow as part of this testing? (Choose the best answer.)

A
Customers are allowed to use their own testing and monitoring tools.
B
Customers can simulate DoS attack scenarios as long as it's restricted to the customer's own environment.
C
Customers can validate that their network resources are isolated from other customer resources.
D
Customers are allowed to test Oracle Cloud Infrastructure (OCI) hardware related to resources in their tenancy.

Reveal answer details Close answer details

Correct answerD

Explanation

References:
https://docs.oracle.com/en-us/iaas/Content/Security/Concepts/security_testing-policy.htm

Question 6

Single choice

Your deployment platform within Oracle Cloud Infrastructure (OCI) leverages a compute instance with multiple block volumes attached. There are multiple teams that use the same compute instance and have access to these block volumes. You want to ensure that no one accidentally deletes any of these block volumes. You have started to construct the following IAM policy but need to determine which permissions should be used.

allow group DeploymentUsers to manage volume-family where ANY { request.permission != <???>,
request.permission != <???>, request.permission != <???> }

Which permissions can you use in place of <???> in this policy? (Choose the best answer.)

A
VOLUME_DELETE, VOLUME_ATTACHMENT_DELETE, VOLUME_BACKUP_DELETE
B
VOLUME_ERASE, VOLUME_ATTACHMENT_ERASE, VOLUME_BACKUP_ERASE
C
ERASE_VOLUME, ERASE_VOLUME_ATTACHMENT, ERASE_VOLUME_BACKUP
D
DELETE_VOLUME, DELETE_VOLUME_ATTACHMENT, DELETE_VOLUME_BACKUP

Reveal answer details Close answer details

Correct answerA

Question 7

Single choice

You have a Linux compute instance located in a public subnet in a VCN which hosts a web application.
The security list attached to subnet containing the compute instance has the following stateful ingress rule.

The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the compute instance from the internet. However, you are not able to connect to the web server using your web browser.

Which step will resolve the issue? (Choose the best answer.)

A
In the route table, add a rule for your default traffic to be routed to NAT gateway.
B
In the security list, add an ingress rule for port 80 (http).
C
In the security list, remove the ssh rule.
D
In the route table, add a rule for your default traffic to be routed to service gateway.

Reveal answer details Close answer details

Correct answerD

Question 8

Single choice

You created an Oracle Linux compute instance through the Oracle Cloud Infrastructure (OCI) management console then immediately realize you forgot to add an SSH key file. You notice that OCI compute service provides instance console connections that supports adding SSH keys for a running instance. Hence, you created the console connection for your Linux server and activated it using the connection string provided.
However, now you get prompted for a username and password to login.

What option should you recommend to add the SSH key to your running instance, while minimizing the administrative overhead? (Choose the best answer.)

A
You need to configure the boot loader to use ttyS0 as a console terminal on the VM.
B
You need to terminate the running instance and recreate it by providing the SSH key file.
C
You need to reboot the instance from the console, boot into the bash shell in maintenance mode, and add SSH keys for the opc user.
D
You need to modify the serial console connection string to include the identity file flag, -i to specify the SSH key to use.

Reveal answer details Close answer details

Correct answerD

Explanation

References:
https://docs.oracle.com/en-us/iaas/Content/Compute/References/serialconsole.htm

Question 9

Single choice

What is a key benefit of using Oracle Cloud Infrastructure's Resource Manager for your Terraform provisioning and management activities? (Choose the best answer.)

A
You can use Resource Manager to apply patches to all existing Oracle Linux interfaces in a specified compartment.
B
Resource Manager has administrative privileges by design. Even if your IAM user does not have access, you can leverage Resource Manager to provision new resources to any compartment in the Tenancy.
C
You can use Resource Manager to identify and maintain an inventory of all Compute and Database instances across your tenancy.
D
Resource Manager manages to Terraform state file for your infrastructure and locks the file so that only one job at a time can run on a given stack.

Reveal answer details Close answer details

Correct answerD

Explanation

References:
https://docs.oracle.com/en-us/iaas/Content/ResourceManager/Concepts/
samplecomputeinstance.htm

Free 1Z0-1067-21 Exam Dumps Preview

Oracle Cloud Infrastructure 2021 Cloud Operations Associate

PREVIEW CONTENTS · 1 VOLUME

QUESTION 1

QUESTION 2

QUESTION 3

QUESTION 4

QUESTION 5

QUESTION 6

QUESTION 7

QUESTION 8

QUESTION 9