1Z0-1067-21 Exam Details

  • Exam Code
    :1Z0-1067-21
  • Exam Name
    :Oracle Cloud Infrastructure 2021 Cloud Operations Associate
  • Certification
    :Oracle Certifications
  • Vendor
    :Oracle
  • Total Questions
    :55 Q&As
  • Last Updated
    :Jul 07, 2026

Oracle 1Z0-1067-21 Online Questions & Answers

  • Question 1:

    You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-

    Admins and NRT-Admins, respectively.

    You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us-phoenix-1 region only and not any other OCI regions.

    What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.)

    A. Allow group PHX-Admins to manage all-resources in tenancy where request.region= ‘phx’
    B. Allow group PHX-Admins to manage all-resources in tenancy where request.permission= ‘phx’
    C. Allow group PHX-Admins to manage all-resources in tenancy where request.target= ‘phx’
    D. Allow group PHX-Admins to manage all-resources in tenancy where request.location= ‘phx’

  • Question 2:

    Your deployment platform within Oracle Cloud Infrastructure (OCI) leverages a compute instance with multiple block volumes attached. There are multiple teams that use the same compute instance and have access to these block volumes.

    You want to ensure that no one accidentally deletes any of these block volumes. You have started to construct the following IAM policy but need to determine which permissions should be used.

    allow group DeploymentUsers to manage volume-family where ANY { request.permission != , request.permission != , request.permission != }

    Which permissions can you use in place of in this policy? (Choose the best answer.)

    A. VOLUME_DELETE, VOLUME_ATTACHMENT_DELETE, VOLUME_BACKUP_DELETE
    B. VOLUME_ERASE, VOLUME_ATTACHMENT_ERASE, VOLUME_BACKUP_ERASE
    C. ERASE_VOLUME, ERASE_VOLUME_ATTACHMENT, ERASE_VOLUME_BACKUP
    D. DELETE_VOLUME, DELETE_VOLUME_ATTACHMENT, DELETE_VOLUME_BACKUP

  • Question 3:

    You have been asked to set up connectivity between a client's on-premises network and Oracle Cloud Infrastructure (OCI). The requirements are:

    Low latency: The applications are financial and require low latency connectivity into OCI.

    Consistency: The application isn't tolerant of performance variation.

    Performance: The communications link needs to support up to 1.25 Gbps.

    Encryption: The communications link needs to encrypt any data in transit between the on-premises network and OCI Virtual Cloud Network (VCN).

    The client wants to implement the above with as low a cost as possible, while meeting all of the requirements. What should you suggest? (Choose the best answer.)

    A. Provision FastConnect with a single private virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.
    B. Provision FastConnect with a single public virtual circuit.
    C. Provision a site-to-site IPsec VPN between your on-premises network and your virtual cloud network (VCN) using VPN Connect.
    D. Provision FastConnect with a single private virtual circuit.
    E. Provision FastConnect with a single public virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.

  • Question 4:

    You have been contracted by a local e-commerce company to assist with enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public

    load balancer, application servers in a private subnet, and a database in a separate, private subnet.

    The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically.

    After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)

    A. Create a load balancer policy in the Traffic Management service. Configure one answer for each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.
    B. Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A record. Inform customers to prepend the website URL with failover if the primary site is unavailable.
    C. Create a failover policy in the Traffic Management service. Set the IP address of the public load balancer for the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.
    D. Deploy a new load balancer in the primary region. Create one backend set for the primary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.

  • Question 5:

    You run a large global application with 90% of customers based in the US and Canada. You want to be able to test a new feature and allow a small percentage of users to access the new version of your application. What Oracle Cloud Infrastructure Traffic Management steering policy should you utilize? (Choose the best answer.)

    A. Load Balancer
    B. IP Prefix steering
    C. ASN steering
    D. Geolocation steering

  • Question 6:

    You have set an alarm to be generated when the CPU usage of a specified instance is greater than 10%. In the alarm behavior view below you notice that the critical condition happened around 23:30. You were expecting a notification after 1 minute, however, the alarm firing state did not begin until 23:33.

    What should you change to fix it? (Choose the best answer.)

    A. Change the alarm's metric interval to 1.
    B. Change the alarm condition to be grater than 3%.
    C. Change the notification topic that you previously associated with the alarm.
    D. Change the alarm's trigger delay minutes value to 1.

  • Question 7:

    Your customer is running a set of compute instances inside a private subnet to manage their workloads on Oracle Cloud Infrastructure (OCI) tenancy. You have set up auto scaling feature to provide consistent performance to their end users during period of high demand.

    Which step should be met for auto scaling to work? (Choose the best answer.)

    A. OS Management Service agent (osms) must be installed on the instances.
    B. Audit logs for the instances should be enabled.
    C. Service gateway should be setup to allow instances to send metrics to monitoring service.
    D. Monitoring for the instances should not be enabled.

  • Question 8:

    Which two statements about the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI) are TRUE? (Choose two.)

    A. You can run CLI commands from inside OCI Regions only.
    B. You can filter CLI output using the JMESPath query option for JSON.
    C. The CLI provides an automatic way to connect with instances provisioned on OCI.
    D. The CLI allows you to use the Python language to interact with OCI APIs.
    E. The CLI provides the same core functionality as the Console, plus additional commands.

  • Question 9:

    You have been asked to review a network design for Oracle Cloud Infrastructure (OCI) by a major client. The client's IT team needs to provision two Virtual Cloud Networks (VCNs) for a major application. The application uses a large number of virtual machine instances. Additionally, in the future, a VCN peering will be required to allow connectivity between the VCNs.

    Which of the following are valid IP ranges to consider? (Choose the best answer.)

    A. 10.0.0.0/30 and 192.168.0.0/30
    B. 10.0.0.0/8 and 11.0.0.0/8
    C. 10.0.8.0/21 and 10.0.16.0/22
    D. 10.0.0.0/16 and 10.0.64.0/24

  • Question 10:

    You are using Oracle Cloud Infrastructure (OCI) console to set up an alarm on a budget to track your OCI spending. Which two are valid targets for creating a budget in OCI? (Choose two.)

    A. Select group as the type of target for your budget.
    B. Select Tenancy as the type of target for your budget.
    C. Select user as the type of target for your budget.
    D. Select Cost-Tracking Tags as the type of target for your budget.
    E. Select Compartment as the type of target for your budget.

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Oracle exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 1Z0-1067-21 exam preparations and Oracle certification application, do not hesitate to visit our Vcedump.com to find your solutions here.