Oracle 1Z0-1072-20 Online Practice Questions and Exam Preparation

Oracle 1Z0-1072-20 Online Questions & Answers

• Question 131:

  Your company has been running several small applications in Oracle Cloud Infrastructure and is planning a proof-of-concept (POC) to deploy PeopleSoft. If your existing resources are being maintained in the root compartment, what is the recommended approach for defining security for the upcoming POC?

  A. Create a new compartment for the POC and grant appropriate permissions to create and manage resources within the compartment.
  B. Provision all new resources into the root compartment. Grant permissions that only allow for creation and management of resources specific to the POC.
  C. Provision all new resources into the root compartment. Use defined tags to separate resources that belong to different applications.
  D. Create a new tenancy for the POC. Provision all new resources into the root compartment. Grant appropriate permissions to create and manage resources within the root compartment.
  A. Create a new compartment for the POC and grant appropriate permissions to create and manage resources within the compartment.

  ---

  If your organization is small, or if you are still in the proof-of-concept stage of evaluating Oracle Cloud Infrastructure, consider placing all of your resources in the root compartment (tenancy). This approach makes it easy for you to quickly view and manage all your resources. You can still write policies and create groups to restrict permissions on specific resources to only the users who need access. If you plan to maintain all your resources in the root compartment, we recommend setting up a separate sandbox compartment to give users a dedicated space to try out features. In the sandbox compartment, you can grant users permissions to create and manage resources, while maintaining stricter permissions on the resources in your tenancy (root) compartment. https://www.oracle.com/a/ocom/docs/best-practices-for-iam-on-oci.pdf

• Question 132:

  You have the following compartment structure in your tenancy. Root compartment->Training- >Training-subl ->Training-sub2 You create a policy in the root compartment to allow the default admin for the account (Administrators) to manage

  block volumes in compartment Training-sub2.

  What policy would you write to meet this requirement?

  A. Allow group Administrators to manage volume-family in root compartment
  B. Allow group Administrators to manage volume-family in compartment Training-sub1 :Training- sub2
  C. Allow group Administrators to manage volume-family in compartment Training: Training-sub 1 :Training-sub2
  D. Allow group Administrators to manage volume-family in compartment Training-sub2
  C. Allow group Administrators to manage volume-family in compartment Training: Training-sub 1 :Training-sub2

  ---

  a policy statement must specify the compartment for which access is being granted (or the tenancy). Where you create the policy determines who can update the policy. If you attach the policy to the compartment or its parent, you can simply specify the compartment name. If you attach the policy further up the hierarchy, you must specify the path. The format of the path is each compartment name (or OCID) in the path, separated by a colon: :: . . . For example, assume you have a three-level compartment hierarchy, shown here:

  

  You want to create a policy to allow NetworkAdmins to manage VCNs in CompartmentC. If you want to attach this policy to CompartmentC or to its parent, CompartmentB, write this policy statement:

  Allow group NewtworkAdmins to manage virtual-network-family in compartment CompartmentC However, if you want to attach this policy to CompartmentA (so that only administrators of CompartmentA can modify it), write this policy

  statement that specifies the path:

  Allow group NewtworkAdmins to manage virtual-network-family in compartment CompartmentB:CompartmentC

  To attach this policy to the tenancy, write this policy statement that specifies the path from CompartmentA to CompartmentC:

  Allow group NewtworkAdmins to manage virtual-network-family in compartment CompartmentA:CompartmentB:CompartmentC

• Question 133:

  Which two components cannot be deleted in your Oracle Cloud Infrastructure Virtual Cloud Network? (Choose two.)

  A. Service gateway
  B. Default security list
  C. Routing gateway
  D. Default route table
  E. Default subnet
  B. Default security list
  D. Default route table

  ---

  Reference: https://www.oracle.com/a/ocom/docs/vcn-deployment-guide.pdf (4)

• Question 134:

  Which five are the required parameters to launch an instance in Oracle Cloud Infrastructure? (Choose five.)

  A. subnet
  B. Availability Domain
  C. Virtual Cloud Network
  D. host name
  E. instance shape
  F. image operating system
  G. private IP address
  A. subnet
  B. Availability Domain
  C. Virtual Cloud Network
  E. instance shape
  F. image operating system

  ---

  References: https://docs.cloud.oracle.com/iaas/Content/Compute/Concepts/computeoverview.htm

• Question 135:

  Which two resources are available by default when your Oracle Cloud Infrastructure tenancy is provisioned?

  A. an NVMe SSD boot disk for each instance, whose size is determined by the image and shape of the instance
  B. a range of public IP addresses that are reserved for your tenancy
  C. a set of images, where each image is a template of a virtual hard drive that consists of the OS and installed software and applications
  D. a variety of shapes, where each shape determines the number of CPUs and memory allocated to an instance.
  C. a set of images, where each image is a template of a virtual hard drive that consists of the OS and installed software and applications
  D. a variety of shapes, where each shape determines the number of CPUs and memory allocated to an instance.

• Question 136:

  You are designing a networking infrastructure in multiple Oracle Cloud Infrastructure regions and require connectivity between workloads in each region. You have created a dynamic routing gateway (DRG) and a remote peering connection.

  However, your workloads are unable to communicate with each other.

  What are two reasons for this? (Choose two.)

  A. The security lists associated with subnets in each virtual cloud network (VCN) do not have the appropriate ingress rules
  B. Identity and Access Management (IAM) policies have not been defined to allow connectivity across the two VCNs in different regions
  C. A local peering gateway needs to be created in each VCN with a default route rule added in the route table forwarding the traffic to the local peering gateway
  D. An Internet gateway needs to be created in each VCN with a default route rule added in the route table forwarding the traffic to the Internet Gateway
  E. The route table associated with subnets in each VCN do not have a route rule defined to forward the traffic to their respective DRGs
  A. The security lists associated with subnets in each virtual cloud network (VCN) do not have the appropriate ingress rules
  E. The route table associated with subnets in each VCN do not have a route rule defined to forward the traffic to their respective DRGs

  ---

  Setting Up a Remote Peering

  Create the RPCs: Each VCN administrator creates an RPC for their own VCN's DRG. Share information: The administrators share the basic required information. Set up the required IAM policies for the connection: The administrators set up

  IAM policies to enable the connection to be established.

  Establish the connection: The requestor connects the two RPCs (see Important Remote Peering Concepts for the definition of the requestor and acceptor). Update route tables: Each administrator updates their VCN's route tables to enable

  traffic between the peered VCNs as desired.

  Update security rules: Each administrator updates their VCN's security rules to enable traffic between the peered VCNs as desired.

• Question 137:

  Which three are capabilities of the dbaascli utility? (Choose three.)

  A. Patching the primary database deployment
  B. Open port 1521 in the VCN to allow for traffic to the listener
  C. Start and open the database instance
  D. Switchover and failover in an Oracle Guard configuration
  E. Clone a DB
  A. Patching the primary database deployment
  C. Start and open the database instance
  D. Switchover and failover in an Oracle Guard configuration

  ---

  https://docs.oracle.com/en/cloud/paas/database-dbaas-cloud/csdbi/dbaascli.html Using the dbaascli utility, you can:

  Change the password of a database user.

  Start and stop a database.

  Start and stop the Oracle Net listener

  Check the status of the Oracle Data Guard configuration. Perform switchover and failover in an Oracle Data Guard configuration.

  Patch the database deployment.

  Perform database recovery.

  Rotate the master encryption key.

  https://docs.oracle.com/en/cloud/paas/database-dbaas-cloud/csdbi/dbaascli.html

• Question 138:

  Which three methods can you use to manage Oracle Cloud Infrastructure services? (Choose three.)

  A. Oracle Cloud Infrastructure Desktop Client
  B. Oracle Cloud Infrastructure Console
  C. SSH or RDP
  D. Command-line Interface
  E. REST API
  B. Oracle Cloud Infrastructure Console
  D. Command-line Interface
  E. REST API

  ---

  https://docs.cloud.oracle.com/iaas/Content/GSG/Concepts/baremetalintro.htm

• Question 139:

  Which two statements are true about restoring a block volume from a manual or policy-based block volume backup? (Choose two.)

  A. It can be restored as new volumes with different sizes from the backups
  B. It can be restored as a new volume to any AD across different regions
  C. It must be restored as a new volume to the same availability domain (AD) on which the original block volume backup resides
  D. It can be restored as a new volume to any AD in the same region
  A. It can be restored as new volumes with different sizes from the backups
  D. It can be restored as a new volume to any AD in the same region

  ---

  A ?Backups are encrypted and stored in Oracle Cloud Infrastructure Object Storage, and can be restored as new volumes to any availability domain within the same region they are stored. D- You can restore a block volume backup to a larger volume size. To do this, check Custom Block Volume Size (GB), and then specify the new size. You can only increase the size of the volume, you cannot decrease the size.

• Question 140:

  You have a working application in the US East region. The app is a 3-tier app with a database backend

  - you take regular backups of the database into OCI Object Storage in the US East region. For Business continuity; you are leveraging OCI Object Storage cross-region copy feature to copy database backups to the US West region.

  Which of the following three steps do you need to execute to meet your requirement?

  A. Write an IAM policy and authorize the Object Storage service to manage objects on your behalf
  B. Specify an existing destination bucket
  C. Specify the bucket visibility for both the source and destination buckets
  D. Provide a destination object name
  E. Provide an option to choose bulk copying of objects
  F. Choose an overwrite rule
  A. Write an IAM policy and authorize the Object Storage service to manage objects on your behalf
  B. Specify an existing destination bucket
  F. Choose an overwrite rule

  ---

  You can copy objects to other buckets in the same region and to buckets in other regions. You must have the required access to both the source and destination buckets when performing an object copy. You must also have permissions to

  manage objects in the source and destination buckets.

  Because Object Storage is a regional service, you must authorize the Object Storage service for each region carrying out copy operations on your behalf. For example, you might authorize the Object Storage service in region US East

  (Ashburn) to manage objects on your behalf. Once you authorize the Object Storage service, you can copy an object stored in a US East (Ashburn) bucket to a bucket in another region.

  You can use overwrite rules to control the copying of objects based on their entity tag (ETag) values. Specify an existing target bucket for the copy request. The copy operation does not automatically create buckets.