Oracle 1Z0-1072-20 Online Practice Questions and Exam Preparation

Oracle 1Z0-1072-20 Online Questions & Answers

• Question 61:

  Which statement is true about Oracle Cloud Infrastructure FastConnect?

  A. For private peering, FastConnect extends your existing infrastructure to allow you to consume object storage from your on-premises data center
  B. For private peering, FastConnect extends your existing infrastructure to a virtual cloud network
  C. The FastConnect provider network offers only 1 Gbps port connection speed increments
  D. For public peering, a dynamic routing gateway must be configured and attached to the virtual cloud network (VCN)
  B. For private peering, FastConnect extends your existing infrastructure to a virtual cloud network

  ---

  With FastConnect, you can choose to use private peering, public peering, or both. Private peering: To extend your existing infrastructure into a virtual cloud network (VCN) in Oracle Cloud Infrastructure (for example, to implement a hybrid cloud, or a lift and shift scenario). Communication across the connection is with IPv4 private addresses (typically RFC 1918). Public peering: To access public services in Oracle Cloud Infrastructure without using the internet. For example, Object Storage, the Oracle Cloud Infrastructure Console and APIs, or public load balancers in your VCN. Communication across the connection is with IPv4 public IP addresses. Without FastConnect, the traffic destined for public IP addresses would be routed over the internet.

• Question 62:

  Which two statements about the Oracle File Storage Service (FSS) Security are accurate? (Choose two.)

  A. Oracle IAM controls which filesystems are mountable by which instances.
  B. Security lists can be used as a virtual firewall to prevent an instance from mounting an FSS mount target within a subnet.
  C. Encryption of file storage in FSS is optional.
  D. Data in transit to an FSS mount target is encrypted.
  E. FSS leverages UNIX user group and permission checking for file access security.
  D. Data in transit to an FSS mount target is encrypted.
  E. FSS leverages UNIX user group and permission checking for file access security.

  ---

  All data is encrypted at rest. and In-transit encryption provides a way to secure your data between instances and mounted file systems using TLS v. 1.2 (Transport Layer Security) encryption. File Storage service supports the AUTH_UNIX style of authentication and permission checking for remote NFS client requests.

• Question 63:

  Which two choices are true for Oracle Autonomous Database with Shared Exadata Infrastructure?

  A. Billing for storage usage continues when autonomous database is stopped.
  B. Billing stops for both CPU and storage usage when autonomous database is stopped.
  C. Billing for compute usage stops when autonomous database is stopped.
  D. Autonomous database does not support per-second billing.
  E. Billing does not stop when autonomous database is terminated.
  A. Billing for storage usage continues when autonomous database is stopped.
  C. Billing for compute usage stops when autonomous database is stopped.

• Question 64:

  You are responsible for creating and maintaining an enterprise application that consists of multiple storage volumes across multiple compute instances in Oracle Cloud Infrastructure (OCI). The storage volumes include boot volumes and block

  volumes for your data storage. You need to create

  backups of these storage volumes in the most time-efficient manner.

  How can you meet this requirement?

  A. Create clones of all boot volumes and block volumes one at a time.
  B. Create on-demand full backups of boot volumes, and copy data in block volumes to Object Storage using OCI CLI.
  C. Create on-demand full backups of block volumes, and create custom images from the boot volumes.
  D. Group together multiple storage volumes in a volume group and create volume group backups.
  D. Group together multiple storage volumes in a volume group and create volume group backups.

  ---

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Block/Concepts/volumegroups.htm

• Question 65:

  Which two statements are true regarding cloning a block volume?

  A. You can change the block volume performance when creating a clone
  B. You can clone block volumes across regions
  C. You can change the block volume size when creating a clone
  D. You can skip block volume encryption when creating a clone
  A. You can change the block volume performance when creating a clone
  C. You can change the block volume size when creating a clone

  ---

  You can create a clone from a volume using the Block Volume service. Cloning enables you to make a copy of an existing block volume without needing to go through the backup and restore process. A cloned volume is a point-in-time direct

  disk-to-disk deep copy of the source volume, so all the data that is in the source volume when the clone is created is copied to the clone volume. You can only create a clone for a volume within the same region, availability domain and tenant.

  You can create a clone for a volume between compartments as long as you have the required access permissions for the operation.

  during create a clone you can do the following

  If you want to clone the block volume to a larger size volume, check Custom Block Volume Size (GB) and then specify the new size. You can only increase the size of the volume, you cannot decrease the size. If you clone the block volume to

  a larger size volume, you need to extend the volume's partition. See Extending the Partition for a Block Volume for more information. If you want to change the elastic performance setting when cloning the volume, check Custom Block Volume

  Performance and select the elastic performance setting you want the volume clone to use. See Block Volume Elastic Performance for more information. You can also change the elastic performance setting after you have cloned the volume,

  see Block Volume Elastic Performance. If you leave Custom Block Volume Performance unchecked, the cloned volume will use the same elastic performance setting as the source volume.

• Question 66:

  Which two options are available when configuring DNS resolution for your virtual cloud network? (Choose two.)

  A. Internet and custom resolver
  B. Google DNS servers
  C. custom resolver
  D. Internet and virtual cloud network (VCN) resolver
  C. custom resolver
  D. Internet and virtual cloud network (VCN) resolver

  ---

  References: https://docs.cloud.oracle.com/iaas/Content/Database/Tasks/launchingDB.htm

• Question 67:

  You have one database-style application that frequently makes many random reads and writes across the dataset. Which storage offering supports this application?

  A. Object Storage Service
  B. Archive Storage Service
  C. File Storage Service
  D. Block Storage Service
  D. Block Storage Service

• Question 68:

  Which of the following statement is true regarding Oracle Cloud Infrastructure Object Storage Pre- Authenticated Requests?

  A. It Is not possible to create pre-authenticated requests for "archive" storage tier
  B. Changing the bucket visibility does not change existing pre-authenticated requests
  C. It is not possible to create pre-authenticated requests for the buckets, but only for the objects
  D. Pre-authenticated requests don't have an expiration
  B. Changing the bucket visibility does not change existing pre-authenticated requests

  ---

  Pre-authenticated requests provide a way to let users access a bucket or an object without having their own credentials, as long as the request creator has permissions to access those objects. For example, you can create a request that lets

  an operations support user upload backups to a bucket without owning API keys. Or, you can create a request that lets a business partner update shared data in a bucket without owning API keys.

  When you create a pre-authenticated request, a unique URL is generated. Anyone you provide this URL to can access the Object Storage resources identified in the pre-authenticated request, using standard HTTP tools like curl and wget.

  Understand the following scope and constraints regarding pre-authenticated requests:

  Users can't list bucket contents.

  You can create an unlimited number of pre-authenticated requests. There is no time limit to the expiration date that you can set. You can't edit a pre-authenticated request. If you want to change user access options in response to changing

  requirements, you must create a new pre-authenticated request. The target and actions for a pre-authenticated request are based on the creator's permissions. The request is not, however, bound to the creator's account login credentials. If

  the creator's login credentials change, a pre-authenticated request is not affected. You cannot delete a bucket that has a pre-authenticated request associated with that bucket or with an object in that bucket.

  Understand the following scope and constraints regarding public access:

  Changing the type of access is bi-directional. You can change a bucket's access from public to private or from private to public.

  Changing the type of access doesn't affect existing pre-authenticated requests. Existing pre- authenticated requests still work.

• Question 69:

  Which three components can you configure in Oracle Infrastructure Identity and Access Management? (Choose three.)

  A. Groups
  B. Users
  C. Instances
  D. Policies
  E. VCNs
  A. Groups
  B. Users
  D. Policies

  ---

  References: https://cloud.oracle.com/governance/identity/faq

• Question 70:

  Which two Oracle Cloud Infrastructure database services allow you to dynamically both scale CPU and storage? (Choose two.)

  A. bare metal DB system
  B. virtual machine DB system
  C. Autonomous Data Warehouse (ADW)
  D. Autonomous Transaction Processing (ATP)
  C. Autonomous Data Warehouse (ADW)
  D. Autonomous Transaction Processing (ATP)

  ---

  If a bare metal DB system requires more compute node processing power, you can scale up (increase) the number of enabled CPU cores in the system without impacting the availability of that system but you can't increase the storage If the original DB system VM shape uses a single node, running databases on the DB system nodes are sequentially stopped and then restarted on the new shape so not dynamic