Oracle Oracle Cloud 1Z0-1067-21 Questions & Answers

• Question 1:

  Your team implemented a SaaS application that requires a whole system deployment for each new customer. The infrastructure provisioning is already automated via Terraform, and now you have been asked to develop an Ansible playbook to centralize configuration file management and deployment.

  What is the most effective way to ensure your playbooks are utilizing up-to-date and accurate inventory? (Choose the best answer.)

  A. Export an inventory list from the Oracle Cloud Infrastructure Web console.

  B. Export an inventory list using Terraform apply command.

  C. Implement a Command Line Interface script to list all the resources and run it within Ansible to generate a dynamic inventory list.

  D. Download the dynamic inventory script provided by Oracle Cloud Infrastructure and include it in the playbook invocation command.

  Correct Answer: D

• Question 2:

  An insurance company has contracted you to help automate their application business continuity plan. They have the application running in eu-frankfurt-1 as the primary site and uk-london-1 as a disaster recovery site. Normally they have a DNS A record associated with the IP address of the primary endpoint in eu-frankfurt-1. In the event of a disaster, they use OCI DNS Zone Management to update the A record and replace it with the IP address of the endpoint in uk-londond-1.

  How can you automate the failover process? (Choose the best answer.)

  A. Create a Health Check that evaluates both regional endpoints. Create a Traffic Management Steering policy with Failover type and associate it with the Health Check.

  B. Create a Traffic Management Steering policy with Load Balancer type and add both eu-frankfurt-1 and uk-london-1 endpoints. Attach the Traffic Management Steering policy to the A record.

  C. Provision a Load Balancer in Frankfurt and associate it with the A record in DNS. Create a backend set with backend servers from both eu-frankfurt-1 and uk-london-1 regions.

  D. Create a Traffic Management Steering policy and attach it to a backend servers from both eu-frankfurt1 and uk-london-1 regions.

  Correct Answer: B

• Question 3:

  Recently, your e-commerce web application has been receiving significantly more traffic than usual. Users are reporting they often encounter a 503 Service Error when trying to access your site. Sometimes the site is very slow.

  You check your instance pool configuration to confirm that the maximum number of instances is configured to allow 20 compute instances. Currently, 14 compute instances have been provisioned by the instance pool. You also confirm that current CPU utilization across all hosts exceeds the scale-out threshold you set in your auto-scaling policy. However, the instance pool is not provisioning any new instances.

  What can you check to determine why the application is NOT functioning properly? (Choose the best answer.)

  A. Verify that the new offer feature code did not introduce any performance bugs.

  B. Verify that the database is accessible.

  C. Verify that the compute resource quota has not been exceeded.

  D. Verify that the Quality Assurance team is not currently performing load-testing against production.

  Correct Answer: C

• Question 4:

  You have a 750 MIB file in an Oracle Cloud Infrastructure (OCI) Object Storage bucket. You want to download the file in multiple parts to speed up the download using the OCI CLI. You also want to configure each part size to be 128 MIB.

  Which is the correct OCI CLI command for this operation? (Choose the best answer.)

  A. oci os object get –ns my–namespace –bn my–bucket ––name my–large–object ––multipart–download– threshold 750 ––parallel–download–count 128

  B. oci os object download –ns my–namespace –bn my–bucket ––name my–large–object ––multipart– download–threshold 750 ––parallel–download–count 128

  C. oci os object download –ns my–namespace –bn my–bucket ––name my–large–object ––resume–put ––multipart–download–threshold 500 ––part–size 128

  D. oci os object get –ns my–namespace –bn my–bucket ––name my–large–object ––multipart–download– threshold 500 ––part–size 128

  Correct Answer: D

  Reference: https://docs.oracle.com/en-us/iaas/Content/API/SDKDocs/cliusing.htm

• Question 5:

  Security Testing Policy describes when and how you may conduct certain types of security testing of Oracle Cloud Services, including vulnerability and penetration tests, as well as tests involving data scraping tools.

  What does Oracle allow as part of this testing? (Choose the best answer.)

  A. Customers are allowed to use their own testing and monitoring tools.

  B. Customers can simulate DoS attack scenarios as long as it's restricted to the customer's own environment.

  C. Customers can validate that their network resources are isolated from other customer resources.

  D. Customers are allowed to test Oracle Cloud Infrastructure (OCI) hardware related to resources in their tenancy.

  Correct Answer: D

  Reference: https://docs.oracle.com/en-us/iaas/Content/Security/Concepts/security_testing-policy.htm

• Question 6:

  You are working as a Cloud Operations Administrator for your company. They have different Oracle Cloud Infrastructure (OCI) tenancies for development and production workloads. Each tenancy has resources in two regions – uk-london-1 and eu-frankfurt-1. You are asked to manage all resources and to automate all the tasks using OCI Command Line Interface (CLI).

  Which is the most efficient method to manage multiple environments using OCI CLI? (Choose the best answer.)

  A. Use OCI CLI profiles to create multiple sets of credentials in your config file, and reference the appropriate profile at runtime.

  B. Create environment variables for the sets of credentials that align to each combination of tenancy, region, and environment.

  C. Run oci setup config to create new credentials for each environment every time you want to access the environment.

  D. Use different bash terminals for each environment.

  Correct Answer: B

• Question 7:

  What is a key benefit of using Oracle Cloud Infrastructure's Resource Manager for your Terraform provisioning and management activities? (Choose the best answer.)

  A. You can use Resource Manager to apply patches to all existing Oracle Linux interfaces in a specified compartment.

  B. Resource Manager has administrative privileges by design. Even if your IAM user does not have access, you can leverage Resource Manager to provision new resources to any compartment in the Tenancy.

  C. You can use Resource Manager to identify and maintain an inventory of all Compute and Database instances across your tenancy.

  D. Resource Manager manages to Terraform state file for your infrastructure and locks the file so that only one job at a time can run on a given stack.

  Correct Answer: D

  Reference: https://docs.oracle.com/en-us/iaas/Content/ResourceManager/Concepts/ samplecomputeinstance.htm

• Question 8:

  A subscriber of an Oracle Cloud Infrastructure (OCI) Notifications service topic complained about not receiving messages from the service.

  Which option can help you debug this issue? (Choose the best answer.)

  A. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service drops the message. Confirm that the subscriber is always online to receive messages to help debug the issue.

  B. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, check the NumberOfNotificationFailed metric through the OCI Monitoring service for failed messages. Copy these messages to an OCI Object Storage bucket. Make sure the subscriber has the required credentials to access this bucket to help debug the issue.

  C. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to one day. Make sure that the subscriber is online at least once a day to help debug the issue.

  D. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to two hours. Configure an alarm on the NumberOfNotificationFailed metric through the OCI Monitoring service to help debug the issue.

  Correct Answer: D

• Question 9:

  Which technique does NOT help you get the optimal performance out of the Oracle Cloud Infrastructure (OCI) File Storage service? (Choose the best answer.)

  A. Limit access to the same Availability Domain (AD) as the File Storage service where possible.

  B. Serialize operations to the file system to access consecutive blocks as much as possible.

  C. Right size compute instances from where file system is accessed based on their network capacity.

  D. Increase concurrency by using multiple threads, multiple clients, and multiple mount targets.

  Correct Answer: D

  Reference: https://www.oracle.com/a/ocom/docs/cloud/file-storage-performance-guide.pdf (6)

• Question 10:

  You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG: NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:

  

  However, after checking the bastion host logs, you discovered that there are IP addresses other than your own that can access your bastion host.

  What is the root cause of this issue? (Choose the best answer.)

  A. The Security List allows access to all IP address which overrides the Network Security Group ingress rules.

  B. All compute instances associated with NSG-050504 are also able to connect to the bastion host.

  C. The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.

  D. A netmask of /32 allows all IP address in the 140.19.2.0 network, other than your IP 140.19.2.140

  Correct Answer: B