Oracle Oracle Cloud 1Z0-1067-21 Questions & Answers

• Question 41:

  You run a large global application with 90% of customers based in the US and Canada. You want to be able to test a new feature and allow a small percentage of users to access the new version of your application.

  What Oracle Cloud Infrastructure Traffic Management steering policy should you utilize? (Choose the best answer.)

  A. Load Balancer

  B. IP Prefix steering

  C. ASN steering

  D. Geolocation steering

  Correct Answer: D

  Reference: https://docs.oracle.com/en-us/iaas/Content/TrafficManagement/Tasks/trafficmanagement.htm

• Question 42:

  Your company recently adopted a hybrid cloud architecture which requires them to migrate some of their on-premises web applications to Oracle Cloud Infrastructure (OCI). You created a Terraform template which automatically provisions OCI resources such as compute instances, load balancer, and a database instance. After running the stack using the terraform apply command, it successfully launched the compute instances and the load balancer, but it failed to create a new database instance with the following error:

  Service error: NotAuthorizedOrNotFound. shape VM.Standard2.4 not found. http status code: 404

  You discovered that the resource quotas assigned to your compartment prevent you from using VM.Standard2.4 instance shapes available in your tenancy. You edit the Terraform script and replace the shape with VM.Standard2.2

  Which option would you recommend to re-run the terraform command to have required OCI resources provisioned with the least effort? (Choose the best answer.)

  A. terraform plan –target=oci_database_db_system.db_system

  B. terraform apply –auto-approve

  C. terraform refresh –target=oci_database_db_system.db_system

  D. terraform apply –target=oci_database_db_system.db_system

  Correct Answer: D

• Question 43:

  You have been monitoring your company's applications running in Oracle Cloud Infrastructure (OCI) and notice that the application is using OCI Traffic Management service. This service uses a traffic steering policy to distribute the DNS traffic based on subnet addresses in a rule set.

  Which steering policy is in use in this particular case? (Choose the best answer.)

  A. Load Balancing policy

  B. Geolocation steering

  C. ASN steering policy

  D. IP Prefix steering

  Correct Answer: C

  Reference: https://k21academy.com/1z0-997/traffic-management-in-oci/

• Question 44:

  You have the following compartment structure within your company's Oracle Cloud Infrastructure (OCI) tenancy:

  

  You want to create a policy in the root compartment to allow SystemAdmins to manage VCNs only in CompartmentC.

  Which policy is correct? (Choose the best answer.)

  A. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentB:CompartmentC

  B. Allow group SystemAdmins to manage virtual-network-family in compartment Root

  C. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentA:CompartmentB:CompartmentC

  D. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentC

  Correct Answer: D

  Reference: https://docs.oracle.com/en-us/iaas/Content/Identity/Concepts/policies.htm

• Question 45:

  Which two statements about the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI) are TRUE? (Choose two.)

  A. You can run CLI commands from inside OCI Regions only.

  B. You can filter CLI output using the JMESPath query option for JSON.

  C. The CLI provides an automatic way to connect with instances provisioned on OCI.

  D. The CLI allows you to use the Python language to interact with OCI APIs.

  E. The CLI provides the same core functionality as the Console, plus additional commands.

  Correct Answer: BE

• Question 46:

  You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.

  

  The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the compute instance from the internet. However, you are not able to connect to the web server using your web browser.

  

  Which step will resolve the issue? (Choose the best answer.)

  A. In the route table, add a rule for your default traffic to be routed to NAT gateway.

  B. In the security list, add an ingress rule for port 80 (http).

  C. In the security list, remove the ssh rule.

  D. In the route table, add a rule for your default traffic to be routed to service gateway.

  Correct Answer: D

• Question 47:

  You have received an email from your manager to provision new resources on Oracle Cloud Infrastructure (OCI). When researching OCI, you determined that you should use OCI Resource Manager. Since this is a task that will be done multiple times for development, test, and production. You will need to create a command that can be re-used.

  Which CLI command can be used in this situation? (Choose the best answer.)

  A. oci resource-manager stack create ––tenancy–id \ ––config-source prod.zip ––variables file://variables.json \ ––display-name Production stack build \ ––description Creating new Production environment

  B. oci resource-manager stack update ––compartment–id \ ––config-source prod.zip ––variables file://variables.json \ ––display-name “Production stack build” \ ––description Creating new Production environment

  C. oci resource-manager stack create ––compartment–id \ ––config-source prod.zip ––variables file://variables.json \ ––display-name Production stack build \ ––description Creating new Production environment

  D. oci resource-manager stack update ––tenancy–id \ ––config-source prod.zip ––variables file://variables.json \ ––display-name “Production stack build” \ ––description Creating new Production environment

  Correct Answer: C

• Question 48:

  You are asked to deploy a new application that has been designed to scale horizontally. The business stakeholders have asked that the application be deployed in us-phoenix-1.

  Normal usage requires 2 OCPUs. You expect to have few spikes during the week, that will require up to 4 OCPUs, and a major usage uptick at the end of each month that will require 8 OCPUs.

  What is the most cost-effective approach to implement a highly available and scalable solution? (Choose the best answer.)

  A. Create an instance pool with a VM.Standard2.2 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances, to handle the weekly spikes, and a maximum of 4 instances.

  B. Create an instance with 1 OCPU shape. Use the Resize Instance action to scale up to a larger shape when more resources are needed.

  C. Create an instance with 1 OCPU shape. Use a CLI script to clone it when more resources are needed.

  D. Create an instance pool with a VM.Standard2.1 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances and a maximum of 8 instances.

  Correct Answer: A

• Question 49:

  You have been asked to set up connectivity between a client's on-premises network and Oracle Cloud

  Infrastructure (OCI). The requirements are:

  Low latency: The applications are financial and require low latency connectivity into OCI.

  Consistency: The application isn't tolerant of performance variation.

  Performance: The communications link needs to support up to 1.25 Gbps.

  Encryption: The communications link needs to encrypt any data in transit between the on-premises

  network and OCI Virtual Cloud Network (VCN).

  The client wants to implement the above with as low a cost as possible, while meeting all of the

  requirements. What should you suggest? (Choose the best answer.)

  A. Provision FastConnect with a single private virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.

  B. Provision FastConnect with a single public virtual circuit.

  C. Provision a site-to-site IPsec VPN between your on-premises network and your virtual cloud network (VCN) using VPN Connect.

  D. Provision FastConnect with a single private virtual circuit.

  E. Provision FastConnect with a single public virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.

  Correct Answer: D

  Reference: https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/fastconnectoverview.htm

• Question 50:

  You are using the Oracle Cloud Infrastructure Command Line Interface to launch a Linux virtual machine. You enter the following command (with correct values for all parameters): The command fails.

  

  Which is NOT a valid parameter in this command? (Choose the best answer.)

  A. –t

  B. – –image-id

  C. – –shape “andlt;shape_name>”

  D. –c

  E. – –subnet-id

  Correct Answer: A