Oracle 1Z0-1072-20 Online Practice Questions and Exam Preparation

Oracle 1Z0-1072-20 Online Questions & Answers

• Question 121:

  You created a public subnet and an internet gateway in your virtual cloud network (VCN) of Oracle Cloud Infrastructure. The public subnet has an associated route table and security list. However, after creating several compute instances in the public subnet, none can reach the Internet. Which two are possible reasons for the connectivity issue? (Choose two.)

  A. The route table has no default route for routing traffic to the internet gateway.
  B. There is no stateful egress rule in the security list associated with the public subnet.
  C. There is no dynamic routing gateway (DRG) associated with the VCN.
  D. There is no stateful ingress rule in the security list associated with the public subnet.
  E. A NAT gateway is needed to enable the communication flow to internet.
  A. The route table has no default route for routing traffic to the internet gateway.
  B. There is no stateful egress rule in the security list associated with the public subnet.

  ---

  An internet gateway as an optional virtual router that connects the edge of the VCN with the internet. To use the gateway, the hosts on both ends of the connection must have public IP addresses for routing. Connections that originate in your VCN and are destined for a public IP address (either inside or outside the VCN) go through the internet gateway. Connections that originate outside the VCN and are destined for a public IP address inside the VCN go through the internet gateway. Working with Internet Gateways You create an internet gateway in the context of a specific VCN. In other words, the internet gateway is automatically attached to a VCN. However, you can disable and re-enable the internet gateway at any time. Compare this with a dynamic routing gateway (DRG), which you create as a standalone object that you then attach to a particular VCN. DRGs use a different model because they're intended to be modular building blocks for privately connecting VCNs to your on-premises network. For traffic to flow between a subnet and an internet gateway, you must create a route rule accordingly in the subnet's route table (for example, destination CIDR = 0.0.0.0/0 and target = internet gateway). If the internet gateway is disabled, that means no traffic will flow to or from the internet even if there's a route rule that enables that traffic. For more information, see Route Tables. For the purposes of access control, you must specify the compartment where you want the internet gateway to reside. If you're not sure which compartment to use, put the internet gateway in the same compartment as the cloud network. For more information, see Access Control. You may optionally assign a friendly name to the internet gateway. It doesn't have to be unique, and you can change it later. Oracle automatically assigns the internet gateway a unique identifier called an Oracle Cloud ID (OCID). For more information, see Resource Identifiers. To delete an internet gateway, it does not have to be disabled, but there must not be a route table that lists it as a target. AS per compute instances can connect to the Internet so you use egress no ingress

• Question 122:

  You have provisioned an Autonomous Transaction Processing (ATP) database and logged into the ATP service console. What are three abilities that can be performed from this service console? (Choose three.)

  A. scale up/down the CPUs
  B. create ATP database users
  C. reset the admin password
  D. set resource management rules
  E. monitor database activity and SQL queries
  C. reset the admin password
  D. set resource management rules
  E. monitor database activity and SQL queries

  ---

  In ATP Service Console,

  In the activity screen allows you to perform some basic monitor database activity and SQL queries

  

  In the administration screen allows you to perform some basic administration of the service, like reset the admin password and set resource management rules

  

• Question 123:

  You deployed a web server in Oracle Cloud Infrastructure using an ephemeral public IP. After a few changes in your web server configuration, you rebooted the server and a new public IP was associated to your instance. What should you do to prevent this from happening again?

  A. Create a reserved public IP and associate it with the security list that your complete instance is using
  B. Create a reserved public IP and associate it with the subnet of your compute instance
  C. Create a reserved public IP and associate it with the VNIC of your compute instance
  D. Create a reserved public IP and associate it with the hosts file of your web server
  C. Create a reserved public IP and associate it with the VNIC of your compute instance

  ---

  A public IP address is an IPv4 address that is reachable from the internet. If a resource in your tenancy needs to be directly reachable from the internet, it must have a public IP address. Depending on the type of resource, there might be other

  requirements.

  There are two types of public IPs:

  Ephemeral: Think of it as temporary and existing for the lifetime of the instance. Reserved: Think of it as persistent and existing beyond the lifetime of the instance it's assigned to. You can unassign it and then reassign it to another instance

  whenever you like. Exception: reserved public IPs on public load balancers.

  To create a new reserved public IP in your pool

  Confirm you're viewing the region and compartment where you want to create the reserved public IP.

  Open the navigation menu. Under Core Infrastructure, go to Networking and click Public IPs.

  Click Create Reserved Public IP.

  Enter the following:

  Name: An optional friendly name for the reserved public IP. The name doesn't have to be unique, and you can change it later. Avoid entering confidential information.

  Compartment: Leave as is.

  Tags:Optionally, you can apply tags. If you have permissions to create a resource, you also have permissions to apply free-form tags to that resource. To apply a defined tag, you must have permissions to use the tag namespace. For more

  information about tagging, see Resource Tags. If you are not sure if you should apply tags, skip this option (you can apply tags later) or ask your administrator.

  Click Create Reserved Public IP.

  To assign a reserved public IP to a private IP

  Prerequisite: The private IP must not have an ephemeral or reserved public IP already assigned to it. If it does, first delete the ephemeral public IP, or unassign the reserved public IP. Confirm you're viewing the compartment that contains the

  instance with the private IP you're interested in.

  Open the navigation menu. Under Core Infrastructure, go to Compute and click Instances.

  Click the instance to view its details.

  Under Resources, click Attached VNICs.

  The primary VNIC and any secondary VNICs attached to the instance are displayed.

  Click the VNIC you're interested in.

  Under Resources, click IP Addresses.

  The VNIC's primary private IP and any secondary private IPs are displayed. For the private IP you're interested in, click the Actions icon (three dots), and then click Edit. In the Public IP Address section, for Public IP Type, select the radio

  button for Reserved Public IP.

  Enter the following:

  Compartment: The compartment that contains the reserved public IP you want to assign. Reserved Public IP: The reserved public IP you want to assign. You have three choices:

  Create a new reserved public IP. You may optionally provide a friendly name for it. The name doesn't have to be unique, and you can change it later. Avoid entering confidential information. Assign a reserved public IP that is currently

  unassigned.

  Move a reserved public IP from another private IP.

  Click Update.

• Question 124:

  You have an application deployed in Oracle Cloud Infrastructure running only in the Phoenix region. You were asked to create a disaster recovery (DR) plan that will protect against the loss of critical dat

  A. The DR site must be at least 500 miles from your primary site and data transfer between the two sites must not traverse the public Internet. Which is the recommended disaster recovery plan?
  B. Create a new virtual cloud network (VCN) in the Phoenix region and create a subnet in one availability domain (AD) that is not currently being used by your production systems. Establish VCN peering between the production and DR sites.
  C. Create a DR environment in Ashburn. Associate a DRG with the VCN in each region and create a remote peering connection between the two VCNs.
  D. Create a DR environment in Ashburn and provision a FastConnect virtual circuit using DRG between the regions.
  E. Create a DR environment in Ashburn. Associate a dynamic routing gateway (DRG) with the VCN in each region and configure an IPsec VPN connection between the two regions.
  B. Create a new virtual cloud network (VCN) in the Phoenix region and create a subnet in one availability domain (AD) that is not currently being used by your production systems. Establish VCN peering between the production and DR sites.

  ---

  Remote VCN peering is the process of connecting two VCNs in different regions (but the same tenancy ). The peering allows the VCNs' resources to communicate using private IP addresses without routing the traffic over the internet or

  through your on-premises network. Without peering, a given VCN would need an internet gateway and public IP addresses for the instances that need to communicate with another VCN in a different region.

  At a high level, the Networking service components required for a remote peering include:

  -

  Two VCNs with non-overlapping CIDRs, in different regions that support remote peering. The VCNs must be in the same tenancy.

  -

  A dynamic routing gateway (DRG) attached to each VCN in the peering relationship. Your VCN already has a DRG if you're using an IPSec VPN or an Oracle Cloud Infrastructure FastConnect private virtual circuit.

  A remote peering connection (RPC) on each DRG in the peering relationship.

  A connection between those two RPCs.

  Supporting route rules to enable traffic to flow over the connection, and only to and from select subnets in the respective VCNs (if desired).

  Supporting security rules to control the types of traffic allowed to and from the instances in the subnets that need to communicate with the other VCN.

  

• Question 125:

  What happens after you successfully run the following command on your Oracle Cloud Infrastructure Container Engine for Kubernetes (OKE) using the YAML file defined below? kubectl create -f definition.yml YAML file ?definition.yml

  

  A. A single Pod with a single container is created.
  B. Two Pods with a container each are created.
  C. A single Pod with two containers is created.
  D. No Pod gets created.
  C. A single Pod with two containers is created.

• Question 126:

  Which two statements are true about Oracle Cloud Infrastructure IPSec VPN Connect?

  A. Each OCI IPSec VPN consists of multiple redundant IPSec tunnels
  B. OCI IPSec VPN tunnel supports only static routes to route traffic
  C. OCI IPSec VPN can be configured in tunnel mode only
  D. OCI IPSec VPN can be configured in trans port mode only
  A. Each OCI IPSec VPN consists of multiple redundant IPSec tunnels
  C. OCI IPSec VPN can be configured in tunnel mode only

  ---

  VPN Connect provides a site-to-site IPSec VPN between your on-premises network and your virtual cloud network (VCN). The IPSec protocol suite encrypts IP traffic before the packets are transferred from the source to the destination and

  decrypts the traffic when it arrives. On general, IPSec can be configured in the following modes:

  Transport mode: IPSec encrypts and authenticates only the actual payload of the packet, and the header information stays intact.

  Tunnel mode (supported by Oracle): IPSec encrypts and authenticates the entire packet. After encryption, the packet is then encapsulated to form a new IP packet that has different header information.

  Oracle Cloud Infrastructure supports only the tunnel mode for IPSec VPNs. Each Oracle IPSec VPN consists of multiple redundant IPSec tunnels. For a given tunnel, you can use either Border Gateway Protocol (BGP) dynamic routing or

  static routing to route that tunnel's traffic.

  More details about routing follow.

  IPSec VPN site-to-site tunnels offer the following advantages:

  Public internet lines are used to transmit data, so dedicated, expensive lease lines from one site to another aren't necessary.

  The internal IP addresses of the participating networks and nodes are hidden from external users. The entire communication between the source and destination sites is encrypted, significantly lowering the chances of information theft.

• Question 127:

  Which DNS resource record type is used to point a host name to an IPv4 address?

  A. ALIAS
  B. A
  C. CNAME
  D. AAAA
  B. A

  ---

  References:

  https://docs.cloud.oracle.com/iaas/Content/DNS/Reference/supporteddnsresource.htm?tocpath=Se rvices%7CDNS%7C_____2

• Question 128:

  Which statement is true regarding Autonomous Transaction Processing (ATP)?

  A. A database name cannot be used concurrently for both an Autonomous Data Warehouse (ADW) and an ATP database
  B. After terminating a database, the database name is available for immediate reuse
  C. A maximum of 8 cores can be enabled for an ATP database
  D. A maximum of 2 TB of storage can be enabled for an ATP database
  A. A database name cannot be used concurrently for both an Autonomous Data Warehouse (ADW) and an ATP database

  ---

  The database name must be unique among all Autonomous Data Warehouses and Autonomous Databases in your tenancy in the same region.

  

  Terminating an Autonomous Transaction Processing database permanently deletes the instance and removes all automatic backups. You cannot recover a terminated database. the maximum number of CPUs and maximum storage capacity that can be provisioned in Oracle Autonomous Database In the current release up to 128 CPUs and 128TB can be provisioned from the cloud console. Customers requiring more resources need to call their Oracle account team

• Question 129:

  You are designing a lab exercise for your team that has a large number of graphics with large file sizes. The application becomes unresponsive if the graphics are embedded in the application. You have uploaded the graphics to Oracle Cloud

  Infrastructure and only added the URL in the application. You need to ensure these graphics are accessible without requiring any authentication for an extended period of time.

  How can you achieve these requirements?

  A. Create pre-authenticated requests (PAR) and specify 00:00:0000 as the expiration time.
  B. Make the object storage bucket private and all objects public and use the URL found in the Object "Details".
  C. Make the object storage bucket public and use the URL found in the Object "Details".
  D. Create PARs and do not specify an expiration date.
  C. Make the object storage bucket public and use the URL found in the Object "Details".

  ---

  Pre-authenticated requests provide a way to let you access a bucket or an object without having your own credentials. For example, you can create a request that lets you upload backups to a bucket without owning API keys.

  When you create a bucket, the bucket is considered a private bucket and the access to the bucket and bucket contents requires authentication and authorization. However, Object Storage supports anonymous, unauthenticated access to a

  bucket. You make a bucket public by enabling read access to the bucket.

  pre-authenticated requests have to select expiration date

  

• Question 130:

  As an Oracle Cloud Infrastructure tenancy administrator, you created predefined lists of values and associated them with tag key definitions.

  One of the users in your tenancy complains that she cannot see these predefined values.

  What is causing this issue?

  A. The user is trying to use free-form tags.
  B. Some of the predefined values are null.
  C. The user is not part of an Identity and Access Management group that gives access to tagging.
  D. The user has breached either the quota or service limit for using tags.
  A. The user is trying to use free-form tags.

  ---

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Tagging/Tasks/usingpredefinedvalues.htm