Oracle 1Z0-1072-20 Online Practice Questions and Exam Preparation

Oracle 1Z0-1072-20 Online Questions & Answers

• Question 211:

  Your company decided to move a few applications to Oracle Cloud Infrastructure (OCI) in the US West (us-phoenix-1) region.

  You need to design a cloud-based disaster recovery (DR) solution with a requirement to deploy the DR resources in the US East (us-ashburn-1) region to minimize network latency.

  What is the recommended deployment?

  A. Deploy production and DR applications in two separate virtual cloud networks (VCNs), each in different regions, and then use VCN local peering gateways for connectivity.
  B. Deploy production and DR applications in two separate VCNs, each in different regions. Connect them using a VCN remote peering connection.
  C. Deploy production and DR applications in the same VCN. Create production subnets in one AD, and DR subnets in another AD (assume a multi-AD region).
  D. Deploy production and DR applications in two separate VCNs in different availability domains (ADs) within the primary region, and then use a VCN remote peering connection for connectivity.
  A. Deploy production and DR applications in two separate virtual cloud networks (VCNs), each in different regions, and then use VCN local peering gateways for connectivity.

  ---

  Remote VCN peering is the process of connecting two VCNs in different regions The peering allows the VCNs' resources to communicate using private IP addresses without routing the traffic over the internet or through your on-premises network.

• Question 212:

  You are running several Linux based operating systems in your on .premises environment that you want to import to OCI as custom images. You can launch your imported images as OCI compute Virtual machines. Which two modes below can be used to launch these imported Linux VMs?

  A. Native
  B. Mixed
  C. Paravirtualized
  D. Emulated
  C. Paravirtualized
  D. Emulated

  ---

  You can use the Console or API to import exported images from Object Storage. To import an image, you need read access to the Object Storage object containing the image.

  during the Import you can select the Launch mode:

  For custom images where the image format is .oci, Oracle Cloud Infrastructure selects the applicable launch mode based on the launch mode for the source image. For custom images exported from Oracle Cloud Infrastructure where the

  image type is QCOW2, select Native Mode.

  To import other custom images select Paravirtualized Mode or Emulated Mode. For more information, see Bring Your Own Image (BYOI).

  

• Question 213:

  You are a network architect and have designed the network infrastructure of a three-tier application on Oracle Cloud Infrastructure (OCI). In the architecture, back-end DB servers are in a private subnet. One of your DB administrators

  requests to have access to OCI object storage service.

  How can you meet this requirement?

  A. Add a new route rule to the private subnet route table to route default traffic to the internet gateway.
  B. Attach a public IP address to the instances in the private subnet, and then add a new route rule to the private subnet route table to route default traffic to the internet gateway.
  C. Create a dynamic routing gateway (DRG) and attach it to your virtual cloud network (VCN). Add a default route rule to the private subnets route table and set the target as DRG.
  D. Create a service gateway, add a new route rule to the private subnet route table that uses object storage as target type.
  D. Create a service gateway, add a new route rule to the private subnet route table that uses object storage as target type.

  ---

  A service gateway lets resources in your VCN privately access specific Oracle services, without exposing the data to an internet gateway or NAT. The resources in the VCN can be in a private subnet and use only private IP addresses. The

  traffic from the VCN to the service of interest travels over the Oracle network fabric and never traverses the internet. To give your VCN access to a given service CIDR label, you must enable that service CIDR label for the VCN's service

  gateway. You can do that when you create the service gateway, or later after it's created. You can also disable a service CIDR label for the service gateway at any time. For traffic to be routed from a subnet in your VCN to a service gateway,

  you must add a rule accordingly to the subnet's route table. The rule must use the service gateway as the target.

  Reference:

  https://blogs.oracle.com/cloud-infrastructure/connect-private-instances-with-oracle- servicesthrough-an-oracle-cloud-infrastructure-service-gateway

• Question 214:

  Which two statements about Oracle Cloud Infrastructure File Storage Service are accurate? (Choose two.)

  A. Customer can encrypt the communication to a mount target via export options.
  B. Mount targets use Oracle-managed keys by default.
  C. File systems use Oracle-managed keys by default.
  D. Customer can encrypt data in their file system using their own Vault encryption key.
  E. Communication with file systems in a mount target is encrypted via HTTPS.
  B. Mount targets use Oracle-managed keys by default.
  D. Customer can encrypt data in their file system using their own Vault encryption key.

  ---

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/File/Concepts/filestorageoverview.htm

• Question 215:

  Given: When creating multiple subnets within a Virtual Cloud Network (VCN), security lists are often made to group common services, for example, SSH and RDP (remote access), 80 and 443 (HTTP), and so on. By default, what is the maximum number of security lists that can be associated with a subnet upon creation?

  A. 4
  B. 2
  C. 5
  D. 3
  C. 5

• Question 216:

  Which two statements are true about Oracle Cloud Infrastructure (OCI) DB Systems Data Guard service?

  A. Both DB systems must use the same VCN, and port 1521 must be open
  B. Data guard configuration on the OCI is limited to a virtual machine only
  C. Data guard implementation for Bare Metal shapes requires two DB Systems, one containing the primary database and one containing the standby database.
  D. Data guard implementation requires two DB Systems, one running the primary database on a virtual machine and the standby database running on bare metal.
  A. Both DB systems must use the same VCN, and port 1521 must be open
  C. Data guard implementation for Bare Metal shapes requires two DB Systems, one containing the primary database and one containing the standby database.

  ---

  An Oracle Data Guard implementation requires two DB systems, one containing the primary database and one containing the standby database. When you enable Oracle Data Guard for a virtual machine DB system database, a new DB

  system with the standby database is created and associated with the primary database. For a bare metal DB system, the DB system with the database that you want to use as the standby must already exist before you enable Oracle Data

  Guard.

  Requirement details are as follows:

  -Both DB systems must be in the same compartment.

  -

  The DB systems must be the same shape type (for example, if the shape of the primary database is a virtual machine, then the shape of the standby database can be any other virtual machine shape).

  -

  If your primary and standby databases are in different regions, then you must peer the virtual cloud networks (VCNs) for each database.

  -

  Configure the security list ingress and egress rules for the subnets of both DB systems in the Oracle Data Guard association to enable TCP traffic to move between the applicable ports. Ensure that the rules you create are stateful (the default).

• Question 217:

  Which statement is true about a pre-authenticated request in Oracle Cloud Infrastructure Object Storage?

  A. You can create only 1, 000 pre-authenticated requests per bucket.
  B. You can create a pre-authenticated request only for public buckets.
  C. You cannot retire a pre-authenticated request before it expires.
  D. You cannot extend the expiration date on a pre-authenticated request.
  D. You cannot extend the expiration date on a pre-authenticated request.

  ---

  https://docs.cloud.oracle.com/iaas/Content/Object/Tasks/usingpreauthenticatedrequests.htm You can create an unlimited number of pre-authenticated requests. You can't edit a pre-authenticated request. If you want to change user access options in response to changing requirements, you must create a new pre-authenticated request. URL: https://docs.cloud.oracle.com/iaas/Content/Object/Tasks/managingbuckets.htm You can change a bucket's access from public to private or from private to public. Changing the type of access doesn't affect existing pre-authenticated requests. Existing pre-authenticated requests still work.

• Question 218:

  A company currently uses Microsoft Active Directory as its identity provider. The company recently subscribed to Oracle Cloud Infrastructure (OCI) to leverage the cloud platform for test and development. As the administrator, you configured

  the OCI tenancy to be federated with Microsoft Active Directory. Now you need to give access to developers so that they can start creating resources in their OCI accounts.

  Which step will you perform to make sure you are not duplicating user creation inside of OCI tenancy?

  A. Create a group for developers on OCI and map the group to a similar group in Microsoft Active Directory during the federation process.
  B. Create a new user account in OCI for each user, and then create policies to provide access to developers.
  C. Create a group for developers on OCI, export all the developers from Microsoft Active Directory, and then import them into the Identity and Access Management (IAM) group.
  D. Create a single user account in OCI, and then create policies to provide access to developers to this single account.
  A. Create a group for developers on OCI and map the group to a similar group in Microsoft Active Directory during the federation process.

  ---

  When working with your IdP, your administrator defines groups and assigns each user to one or more groups according to the type of access the user needs. Oracle Cloud Infrastructure also uses the concept of groups (in conjunction with IAM policies) to define the type of access a user has. As part of setting up the relationship with the IdP, your administrator can map each IdP group to a similarly defined IAM group, so that your company can re-use the IdP group definitions when authorizing user access to Oracle Cloud Infrastructure resources.

• Question 219:

  Which two statements are true when Oracle Data Guard is configured (using the Console) between two Virtual Machine DB Systems deployed in Oracle Cloud Infrastructure? (Choose two.)

  A. Primary is a 1-node RAC DB system and Standby is a 2-node RAC DB system.
  B. Primary is a 2-node RAC DB system and Standby is a 2-node RAC DB system.
  C. Primary is a 1-node RAC DB system and Standby is a 1-node RAC DB system.
  D. Primary is a 2-node RAC DB system and Standby is a 1-node RAC DB system.
  E. Primary is a Bare Metal DB system and Standby is a 1-node RAC DB system.
  A. Primary is a 1-node RAC DB system and Standby is a 2-node RAC DB system.
  C. Primary is a 1-node RAC DB system and Standby is a 1-node RAC DB system.

  ---

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Database/Concepts/overview.htm

• Question 220:

  Which two methods are supported for migrating your on-premises Oracle database to an Oracle Autonomous Transaction Processing (ATP) database in Oracle Cloud Infrastructure? (Choose two.)

  A. Load text files into ATP using SQL Developer.
  B. Use RMAN duplicate.
  C. Use Oracle Data Pump.
  D. Transfer the physical database files and re-create the database.
  E. Use database backup and restore.
  C. Use Oracle Data Pump.
  D. Transfer the physical database files and re-create the database.

  ---

  Reference:

  https://docs.oracle.com/en/solutions/migrate-to-atp/index.html#GUID-28E5A683-6DC6-4A07- BB1C-55F020D4C1CD