Oracle 1Z0-1067-21 Online Practice Questions and Exam Preparation

Oracle 1Z0-1067-21 Online Questions & Answers

• Question 41:

  Which option contains the essential components of the Oracle Cloud Infrastructure Notifications service? (Choose the best answer.)

  A. An ALARM with a name unique across the tenancy, a SUBSCRIPTION, and a METRIC with the measurement of interest.
  B. A TOPIC with a name unique across the tenancy, a SUBSCRIPTION, and a MESSAGE where content is published.
  C. A TOPIC with a name unique across the compartment, a SUBSCRIPTION, and a MESSAGE where content is published.
  D. An ALARM with a name unique across the compartment, a SUBSCRIPTION, and a METRIC with the measurement of interest.
  D. An ALARM with a name unique across the compartment, a SUBSCRIPTION, and a METRIC with the measurement of interest.

• Question 42:

  You are asked to deploy a new application that has been designed to scale horizontally. The business stakeholders have asked that the application be deployed in us-phoenix-1.

  Normal usage requires 2 OCPUs. You expect to have few spikes during the week, that will require up to 4 OCPUs, and a major usage uptick at the end of each month that will require 8 OCPUs.

  What is the most cost-effective approach to implement a highly available and scalable solution? (Choose the best answer.)

  A. Create an instance pool with a VM.Standard2.2 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances, to handle the weekly spikes, and a maximum of 4 instances.
  B. Create an instance with 1 OCPU shape. Use the Resize Instance action to scale up to a larger shape when more resources are needed.
  C. Create an instance with 1 OCPU shape. Use a CLI script to clone it when more resources are needed.
  D. Create an instance pool with a VM.Standard2.1 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances and a maximum of 8 instances.
  A. Create an instance pool with a VM.Standard2.2 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances, to handle the weekly spikes, and a maximum of 4 instances.

• Question 43:

  You have created the following JSON file to specify a lifecycle policy for one of your object storage buckets:

  

  How will this policy affect the objects that are stored in the bucket? (Choose the best answer.)

  A. Objects with the prefix “LOGS” will be retained for 120 days and then deleted permanently.
  B. Objects containing the name prefix LOGS will be automatically migrated from standard Storage to Archive storage 30 days after the creation date. The object will be deleted 120 days after creation.
  C. The objects with prefix “LOGS” will be deleted 30 days after creation date.
  D. Objects containing the name prefix LOGS will be automatically migrated from standard Storage to Archive storage 30 days after the creation date. The object will be migrated back to standard Storage 120 days after creation.
  B. Objects containing the name prefix LOGS will be automatically migrated from standard Storage to Archive storage 30 days after the creation date. The object will be deleted 120 days after creation.

• Question 44:

  You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:

  

  You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet. Which action would you take to accomplish the task? (Choose the best answer.)

  A. Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the public subnet that hosts the company website.
  B. In default security list, add a stateful rule to allow ingress access on port 443.
  C. Create a new security list with a stateful rule to allow ingress access on port 443 and associate it to the public subnet.
  D. Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the instance that hosts the company website.
  D. Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the instance that hosts the company website.

• Question 45:

  You created an Oracle Linux compute instance through the Oracle Cloud Infrastructure (OCI) management console then immediately realize you forgot to add an SSH key file. You notice that OCI compute service provides instance console connections that supports adding SSH keys for a running instance. Hence, you created the console connection for your Linux server and activated it using the connection string provided. However, now you get prompted for a username and password to login.

  What option should you recommend to add the SSH key to your running instance, while minimizing the administrative overhead? (Choose the best answer.)

  A. You need to configure the boot loader to use ttyS0 as a console terminal on the VM.
  B. You need to terminate the running instance and recreate it by providing the SSH key file.
  C. You need to reboot the instance from the console, boot into the bash shell in maintenance mode, and add SSH keys for the opc user.
  D. You need to modify the serial console connection string to include the identity file flag, –i to specify the SSH key to use.
  D. You need to modify the serial console connection string to include the identity file flag, –i to specify the SSH key to use.

  ---

  Reference: https://docs.oracle.com/en-us/iaas/Content/Compute/References/serialconsole.htm

• Question 46:

  You have recently been asked to take over management of your company's infrastructure provisioning efforts, utilizing Terraform v0.12 to provision and manage infrastructure resources in Oracle Cloud Infrastructure (OCI). For the past few days the development environments have been failing to provision. Terraform returns the following error:

  

  You locate the related code block in the Terraform config and find the following:

  

  Which correction should you make to solve this issue? (Choose the best answer.)

  A. Place a command at the end of line 16
  B. Modify line 15 to be the following: tcp_options = {min = “22”, max = “22”)
  C. Modify line 15 to be the following: tcp_options { min = “22” max = “22” }
  D. Replace the curly braces ‘{ }’ in lines 11 and 16 with square braces ‘[ ]’
  B. Modify line 15 to be the following: tcp_options = {min = “22”, max = “22”)

• Question 47:

  You are working as a Cloud Operations Administrator for your company. They have different Oracle Cloud Infrastructure (OCI) tenancies for development and production workloads. Each tenancy has resources in two regions – uk-london-1 and eu-frankfurt-1. You are asked to manage all resources and to automate all the tasks using OCI Command Line Interface (CLI).

  Which is the most efficient method to manage multiple environments using OCI CLI? (Choose the best answer.)

  A. Use OCI CLI profiles to create multiple sets of credentials in your config file, and reference the appropriate profile at runtime.
  B. Create environment variables for the sets of credentials that align to each combination of tenancy, region, and environment.
  C. Run oci setup config to create new credentials for each environment every time you want to access the environment.
  D. Use different bash terminals for each environment.
  B. Create environment variables for the sets of credentials that align to each combination of tenancy, region, and environment.

• Question 48:

  You have been asked to investigate a potential security risk on your company's Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking through the audit logs for suspicious activity. How can you retrieve the audit logs using the OCI Command Line Interface (CLI)? (Choose the best answer.)

  A. oci audit event list –-end-time $end-time –-compartment-id $compartment-id
  B. oci audit event list –-start-time $start-time –-compartment-id $compartment-id
  C. oci audit event list –-start-time $start-time –-end-time $end-time –-compartment-id $compartment-id
  D. oci audit event list –-start-time $start-time –-end-time $end–time –-tenancy-id $tenancy–id
  C. oci audit event list –-start-time $start-time –-end-time $end-time –-compartment-id $compartment-id

• Question 49:

  You have a web application running on Oracle Cloud Infrastructure (OCI) that lets users log in with a username and password. You notice that an attacker has tried to use SQL comment “--" to alter the database query, remove the password check and log in as a user. You decide to prevent any future attacks.

  Which of the following OCI services or features would you choose to safeguard your application? (Choose the best answer.)

  A. Network Security Group
  B. Data Safe
  C. Web Application Framework (WAF)
  D. Vault
  D. Vault

• Question 50:

  A developer has created a file system in Oracle Cloud Infrastructure (OCI) File Storage service. She launches an Oracle Linux compute instance and successfully mounts the file system from the instance.

  She then tries writing to the file system from the compute instance using the following command:

  touch /mnt/yourmountpoint/helloworld

  But gets an error message:

  touch: cannot touch ‘/mnt/yourmountpoint/helloworrld’: Permission denied

  Which is a reason for this error? (Choose the best answer.)

  A. ‘touch’ command is not available in Oracle Linux by default.
  B. Service limits or quota for file system writes have been breached.
  C. User is not part of any OCI Identity and Access Management group with write permissions to File Storage service.
  D. User is connecting as the default Oracle Linux user ‘opc’ instead of ‘root’ user.
  C. User is not part of any OCI Identity and Access Management group with write permissions to File Storage service.

  ---

  Reference: https://itectec.com/unixlinux/touch-cannot-touch-test-permission-denied/