Oracle 1Z0-1072-20 Online Practice Questions and Exam Preparation

Oracle 1Z0-1072-20 Online Questions & Answers

• Question 51:

  What is a "transfer package" when transferring data to OCI via the OCI Data Transfer Service?

  A. A transfer package is the logical representation of the physical shipment containing the HDD transfer devices that you ship to Oracle to upload to OCI.
  B. A transfer package is the software Oracle provides for you to prepare transfer devices for shipment to Oracle
  C. A transfer package contains the physical devices.
  D. A transfer package is the archive file that the Data Transfer Service Utility (dts) writes to the transfer device.
  A. A transfer package is the logical representation of the physical shipment containing the HDD transfer devices that you ship to Oracle to upload to OCI.

  ---

  References: https://blogs.oracle.com/cloud-infrastructure/introducing-oracle-cloud-infrastructure-data-transfer- service

• Question 52:

  You have an Oracle Cloud Infrastructure (OCI) load balancer distributing traffic via an evenly- weighted round robin policy to your backend web servers. You notice that one of your web servers is receiving more traffic than other web servers. How can you resolve this imbalance?

  A. Check security lists and route tables of your virtual cloud network (VCN) and fix any issues associated with the rules
  B. Create separate listeners for each backend web server
  C. Delete and re-create your OCI load balancer
  D. Disable session persistence on your backend set
  D. Disable session persistence on your backend set

  ---

  Session persistence is a method to direct all requests originating from a single logical client to a single backend web server. Backend servers that use caching to improve performance, or to enable log-in sessions or shopping carts, can benefit from session persistence

• Question 53:

  You provisioned an Oracle Autonomous Data Warehouse (ADW) on Oracle Cloud Infrastructure (OCI) and imported data into ADW.

  You want to give your business analyst the ability to connect to the ADW database and run queries. Which two actions can help you meet this requirement? (Choose two.)

  A. Create a database user account for the business analyst.
  B. Grant the predefined database role DWROLE to the database user.
  C. Grant unlimited tablespace privilege to the database user.
  D. Grant the predefined database role DWADW to the database user.
  E. Grant the predefined database role DWUSER to the database user.
  B. Grant the predefined database role DWROLE to the database user.
  C. Grant unlimited tablespace privilege to the database user.

  ---

  Reference:

  https://oracle.github.io/learning-library/oci-library/L100- LAB/Autonomous_Data_Warehouse/ADW_HOL.html

• Question 54:

  You have successfully configured identity federation between Oracle Cloud Infrastructure (OCI) and Oracle Identity Cloud Services (IDCS). A new project manager wants access to OCI for her team and provides the name of an existing group within IDCS to use when granting access. How do you configure federation to allow the project team access to OCI resources?

  A. Create a new IAM group in OCI and map it to the existing IDCS group. Create a new policy in IDCS and reference the name of the IAM group.
  B. Create a new Identity and Access Management (IAM) policy in OCI and reference the name of the IDCS group in each policy statement.
  C. Create a new compartment in OCI with the same name as the existing IDCS group. Create an IAM policy that references the new compartment and the name of the IDCS group.
  D. Create a new IAM group in OCI and map it to the existing IDCS group. Create a new IAM policy and reference the name of the IAM group in each policy statement.
  D. Create a new IAM group in OCI and map it to the existing IDCS group. Create a new IAM policy and reference the name of the IAM group in each policy statement.

  ---

  When working with your IdP, your administrator defines groups and assigns each user to one or more groups according to the type of access the user needs. Oracle Cloud Infrastructure also uses the concept of groups (in conjunction with IAM policies) to define the type of access a user has. As part of setting up the relationship with the IdP, your administrator can map each IdP group to a similarly defined IAM group, so that your company can re-use the IdP group definitions when authorizing user access to Oracle Cloud Infrastructure resources. Here's a screenshot from the mapping process:

  

• Question 55:

  Which two resources reside exclusively in a single Oracle Cloud Infrastructure Availability Domain? (Choose two.)

  A. Identity and Access Management Groups
  B. Object Storage
  C. Web Application Firewall policy
  D. Block volume
  E. Compute instance
  D. Block volume
  E. Compute instance

  ---

  Availability Domain-Specific Resources DB Systems ephemeral public IPs instances: They can be attached only to volumes in the same availability domain. subnets: When you create a subnet, you choose whether it is regional or specific to an availability domain. Oracle recommends using regional subnets. volumes: They can be attached only to an instance in the same availability domain.

• Question 56:

  Which statement is true about Oracle Cloud Infrastructure (OCI) object storage support for server- side encryption?

  A. You must manually enable server-side encryption for each object as you upload to OCI object storage
  B. Objects are automatically encrypted as they are uploaded to object storage and decrypted upon retrieval
  C. You must manually decrypt the data when retrieving from OCI object storage
  D. Only the object data is encrypted and the user-defined metadata that is associated with the object is not encrypted
  B. Objects are automatically encrypted as they are uploaded to object storage and decrypted upon retrieval

  ---

  References: https://www.oracle.com/cloud/storage/object-storage-faq.html

  -

  Oracle Object Storage supports server-side encryption. All data stored in Oracle Object Storage is automatically encrypted

  -

  Encryption is automatically enabled for all data with no action required on the part of customers.

  -

  Oracle encrypt both the object data and the user-defined metadata associated with the object.

• Question 57:

  You are running a mission-critical database application in Oracle Cloud Infrastructure (OCI). You take regular backups of your DB system to OCI object storage. Recently, you notice a failed database backup status in the console. What step can you take to determine the cause of the backup failure?

  A. Ensure that your database host can connect to OCI object storage.
  B. Ensure the database archiving mode is set to NOARCHIVELOG.
  C. Make sure that the database is not active and running while the backup is in progress.
  D. Don't restart the dcsagent program even if it has a status of stop/waiting.
  A. Ensure that your database host can connect to OCI object storage.

  ---

  Database backups can fail for various reasons. Typically, a backup fails because either the database host cannot access the object store, or there are problems on the host or with the database configuration. First need to determining the Problem In the Console, a failed database backup either displays a status of Failed or hangs in the Backup in Progress or Creating state. If the error message does not contain enough information to point you to a solution, you can use the database CLI and log files to gather more data. Then, refer to the applicable section in this topic for a solution. Database Service Agent Issues Your Oracle Cloud Infrastructure Database makes use of an agent framework to allow you to manage your database through the cloud platform. Occasionally you might need to restart the dcsagent program if it has the status of stop/waiting to resolve a backup failure. Object Store Connectivity Issues Backing up your database to Oracle Cloud Infrastructure Object Storage requires that the host can connect to the applicable Swift endpoint. You can test this connectivity by using a Swift user. Host Issues One or more of the following conditions on the database host can cause backups to fail:

  -Interactive Commands in the Oracle Profile

  -The File System Is Full

  -Incorrect Version of the Oracle Database Cloud Backup Module

  -Changes to the Site Profile File (glogin.sql)

  Database Issues

  An improper database state or configuration can lead to failed backups.

  -Database Not Running During Backup

  - Archiving Mode Set to NOARCHIVELOG (When you provision a new database, the archiving mode is set to ARCHIVELOG by default. This is the required archiving mode for backup operations)

  -Stuck Database Archiver Process and Backup Failures

  -Temporary Tablespace Errors

  -

  RMAN Configuration and Backup Failures

  -

  RMAN Retention Policy and Backup Failures

  -Loss of Objectstore Wallet File and Backup Failures

  TDE Wallet and Backup Failures

  -

  Incorrect TDE Wallet Location Specification

  -

  Incorrect State of the TDE Wallet

  -

  Incorrect Configuration Related to the TDE Wallet

  -Missing TDE Wallet File

  As this is not new provisioned database and already in the ARCHIVELOG , regular backups of DB system to OCI object storage in places, so the best answers are,

  - Ensure that your database host can connect to the OCI object storage

  -Restart the database service agent

• Question 58:

  Your Operations team has recently created a new, standard image that will be used to launch all new application servers in the Finance compartment. The custom image currently exists in the Operations compartment. You have access to

  manage all-resources in the Finance compartment and do not have access to the Operations compartment.

  Which two methods would make the new image available for you to use when deploying new servers in the Finance compartment? (Choose two.)

  A. Instruct the Operations team to reassign the custom image to the Finance compartment so you can select it from a drop-down list when launching new compute resources.
  B. Instruct the Operations team to export the image to an object storage bucket, create a pre- authenticated request (PAR), and provide you with the URL. Download the custom image to your laptop and import it as a custom image in the Finance compartment.
  C. Instruct the Administrators team to grant you access to use instance-images in the Operations compartment. Use the Oracle Cloud Identifier (OCID) of the custom image when launching new compute resources in the Finance compartment.
  D. Instruct the Operations team to export the image to an object storage bucket, create a PAR, and provide you with the URL. Use that URL as the source when importing a custom image. Import the custom image into the Finance compartment.
  E. Instruct the Operations team to export the image to an object storage bucket. Instruct the Administrators team to grant you access to the object storage bucket where the custom image is stored. Use the download URL of the custom image as the image source when launching new compute resources in the Finance compartment.
  C. Instruct the Administrators team to grant you access to use instance-images in the Operations compartment. Use the Oracle Cloud Identifier (OCID) of the custom image when launching new compute resources in the Finance compartment.
  E. Instruct the Operations team to export the image to an object storage bucket. Instruct the Administrators team to grant you access to the object storage bucket where the custom image is stored. Use the download URL of the custom image as the image source when launching new compute resources in the Finance compartment.

• Question 59:

  You are designing a two-tier web application in Oracle Cloud Infrastructure (OCI). Your clients want to access the web servers from anywhere, but want to prevent access to the database servers from the Internet. Which is the recommended way to design the network architecture?

  A. Create public subnets for web servers and private subnets for database servers in your virtual cloud network (VCN), and associate separate internet gateways for each subnet.
  B. Create public subnets for web servers and associate a dynamic routing gateway with that subnet, and a private subnet for database servers with no association to dynamic gateway.
  C. Create public subnets for web servers and private subnets for database servers in your VCN, and associate separate security lists and route tables for each subnet.
  D. Create a single public subnet for your web servers and database servers, and associate only your web servers to internet gateway.
  C. Create public subnets for web servers and private subnets for database servers in your VCN, and associate separate security lists and route tables for each subnet.

  ---

  When you create a subnet, by default it's considered public, which means instances in that subnet are allowed to have public IP addresses. Whoever launches the instance chooses whether it will have a public IP address. You can override

  that behavior when creating the subnet and request that it be private, which means instances launched in the subnet are prohibited from having public IP addresses. Network administrators can therefore ensure that instances in the subnet

  have no internet access, even if the VCN has a working internet gateway, and security rules and firewall rules allow the traffic.

  There are two optional gateways (virtual routers) that you can add to your VCN depending on the type of internet access you need:

  Internet gateway: For resources with public IP addresses that need to be reached from the internet (example: a web server) or need to initiate connections to the internet. NAT gateway: For resources without public IP addresses that need to

  initiate connections to the internet (example: for software updates) but need to be protected from inbound connections from the internet.

  Just having an internet gateway alone does not expose the instances in the VCN's subnets directly to the internet. The following requirements must also be met:

  The internet gateway must be enabled (by default, the internet gateway is enabled upon creation).

  The subnet must be public.

  The subnet must have a route rule that directs traffic to the internet gateway. The subnet must have security list rules that allow the traffic (and each instance's firewall must allow the traffic).

  The instance must have a public IP address.

• Question 60:

  Your customer is using an Oracle Cloud Infrastructure (OCI) compartment named Production that hosts

  several resources such as compute instances, DB Systems and File Systems. Each resource in the Production compartment is tagged.

  The customer's security team wants to restrict access to DB Systems to only the authorized group of DBAs.

  Which OCI Tagging capability can be used to meet this requirement?

  A. Tags Defaults with predefined values
  B. Tag Defaults
  C. Cost-Tracking Tags
  D. Tag-based Access Control
  D. Tag-based Access Control

  ---

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/Tagging/Tasks/ managingaccesswithtags.htm#about