Oracle 1Z0-1072-20 Online Practice Questions and Exam Preparation

Oracle 1Z0-1072-20 Online Questions & Answers

• Question 81:

  You want an instance in your compartment to make API calls to other services within Oracle Cloud Infrastructure without storing credentials in a configuration file. What do you need to do?

  A. No action is required. By default, all VM instances are created with an Instance Principal.
  B. Instances cannot access services outside their compartment.
  C. VM instances are treated as users. Create a user and assign the user to that VM instance.
  D. Create appropriate matching rules in the Dynamic Group to create an Instance Principal.
  D. Create appropriate matching rules in the Dynamic Group to create an Instance Principal.

  ---

  References: https://docs.cloud.oracle.com/iaas/Content/Identity/Tasks/managingdynamicgroups.htm

• Question 82:

  An instance is launched with a primary VNIC that is created during instance launch. Which two operations are true when you add secondary VNICs to an existing instance? (Choose two.)

  A. You can remove the primary VNIC after the secondary VNIC's attachment is complete.
  B. You can remove the secondary VNIC later if it is not needed.
  C. The primary and secondary VNIC association should be within the same Availability Domain.
  D. It is not possible to connect two VNICs to an instance.
  B. You can remove the secondary VNIC later if it is not needed.
  C. The primary and secondary VNIC association should be within the same Availability Domain.

  ---

  https://docs.cloud.oracle.com/iaas/Content/Network/Tasks/managingVNICs.htm

• Question 83:

  You need to set up instance principals so that an application running on an instance can call Oracle Cloud Infrastructure (OCI) public services, without the need to configure user credentials. A developer in your team has already configured

  the application built using an OCI SDK to authenticate using the instance principals provider.

  Which is NOT a necessary step to complete this set up?

  A. Create a dynamic group with matching rules to specify which instances you want to allow to make API calls against services.
  B. Generate Auth Tokens to enable instances in the dynamic group to authenticate with APIs.
  C. Create a policy granting permissions to the dynamic group to access services in your compartment or tenancy.
  D. Deploy the application and the SDK to all the instances that belong to the dynamic group.
  D. Deploy the application and the SDK to all the instances that belong to the dynamic group.

  ---

  Reference:

  https://blogs.oracle.com/cloud-infrastructure/announcing-instance-principals-for-identity- andaccess-management

• Question 84:

  You are tasked with creating a highly available clustered application on Oracle Cloud Infrastructure consisting of three nodes. The round-trip latency between nodes must be less than 500 祍 (micro- seconds) and your cluster should be

  resilient to hardware failure.

  What is the recommended deployment strategy?

  A. Deploy the cluster nodes in a single region and deploy each node into a different AD. Select the same fault domain in each AD to ensure consistency.
  B. Deploy the cluster nodes in two separate regions and take advantage of multiple availability domains (ADs) in each region.
  C. Deploy the cluster nodes in a single region and deploy each node into a different AD.
  D. Deploy the cluster nodes in a single region and deploy each node in different fault domains within a single AD.
  D. Deploy the cluster nodes in a single region and deploy each node in different fault domains within a single AD.

• Question 85:

  You have five different company locations spread across the US. For a proof-of-concept (POC) you need to setup secure and encrypted connectivity to your workloads running in a single virtual cloud network (VCN) in the Oracle Cloud

  Infrastructure Ashburn region from all company locations.

  What would meet this requirement?

  A. Create five internet gateways in your VCN and have separate route table for each internet gateway.
  B. Create five virtual circuits using FastConnect for each company location and terminate those connections on a single dynamic routing gateway (DRG). Attach that DRG to your VCN.
  C. Create five IPsec connections with each company location and terminate those connections on a single DRG. Attach that DRG to your VCN.
  D. Create five IPsec VPN connections with each company location and terminate those connections on five separate DRGs. Attach those DRGs to your VCN.
  C. Create five IPsec connections with each company location and terminate those connections on a single DRG. Attach that DRG to your VCN.

  ---

  Access to Your On-Premises Network

  There are two ways to connect your on-premises network to Oracle Cloud Infrastructure:

  VPN Connect: Offers multiple IPSec tunnels between your existing network's edge and your VCN, by way of a DRG that you create and attach to your VCN.

  Oracle Cloud Infrastructure FastConnect: Offers a private connection between your existing network's edge and Oracle Cloud Infrastructure. Traffic does not traverse the internet. Both private peering and public peering are supported. That

  means your on-premises hosts can access private IPv4 addresses in your VCN as well as regional public IPv4 addresses in Oracle Cloud Infrastructure (for example, Object Storage or public load balancers in your VCN).

  You can use one or both types of the preceding connections. If you use both, you can use them simultaneously, or in a redundant configuration. These connections come to your VCN by way of a single DRG that you create and attach to your

  VCN. Without that DRG attachment and a route rule for the DRG, traffic does not flow between your VCN and on-premises network. At any time, you can detach the DRG from your VCN but maintain all the remaining components that form

  the rest of the connection. You could then reattach the DRG again, or attach it to another VCN.

• Question 86:

  You have deployed a compute instance (VM.Standard2.24) to run an Oracle database. With this set up, you run into some performance issues and want to leverage an OCI Dense IO shape (VM.DenseIO2.24), with which you get 25.6 TB local NVMe SSD. You do not want to lose the configuration changes you made to the instance. Which of the following TWO steps ARE NOT required to make this transition?

  A. Terminate the VM.Standard2.24 instance and do not preserve the boot volume
  B. Create a new instance using the VM.Dense102.24 shape using the preserved boot volume and move the Oracle Database data to NVMe disks
  C. Terminate the VM.Standard2.24 instance and preserve the boot volume
  D. Create a new instance using a VM.DenseIO2.24 shape using the preserved boot volume and move the Oracle Database data to block volumes
  A. Terminate the VM.Standard2.24 instance and do not preserve the boot volume
  D. Create a new instance using a VM.DenseIO2.24 shape using the preserved boot volume and move the Oracle Database data to block volumes

  ---

  You can permanently terminate (delete) instances that you no longer need. Any attached VNICs and volumes are automatically detached when the instance terminates. Eventually, the instance's public and private IP addresses are released and become available for other instances. By default, the instance's boot volume is deleted when you terminate the instance, however you can preserve the boot volume associated with the instance, so that you can attach it to a different instance as a data volume, or use it to launch a new instance. Dense I/O Shapes Designed for large databases, big data workloads, and applications that require high-performance local storage. DenseIO shapes include locally-attached NVMe-based SSDs. so once you create the VM.DenseIO you need to moce the Database to locally-attached NVMe-based SSDs

• Question 87:

  You have an application server running in a public subnet on a compute instance in US West (us- phoenix-1) region of Oracle Cloud Infrastructure (OCI). The data sitting on this instance needs to be copied to OCI Object storage bucket

  available in the same region without traversing over the internet. To enable the connectivity between the instance and Object Storage, you created a service gateway with service CIDR of all Object Storage in us-phoenix-1 enabled. You also

  modified the security rules to allow the desired traffic.

  However, when you tried sending the data to the Object Storage bucket, you notice that the data is going over the internet and not via the service gateway.

  What could be the possible reason for this behavior?

  A. The route table associated with the subnet has no route rule where the destination is object storage service
  B. The service gateway created in the VCN resides in a different availability domain
  C. The security list associated with the subnet has an egress rule that allows all traffic to be forwarded to a destination CIDR 0.0.0.0/0
  D. Identity and Access Management (IAM) policies restrict the access to the object storage bucket
  A. The route table associated with the subnet has no route rule where the destination is object storage service

• Question 88:

  Which three must be configured for a load balancer to accept incoming traffic? (Choose two.)

  A. a listener
  B. a back-end server
  C. a back end set
  D. a security list that is open on a listener port
  E. a certificate
  A. a listener
  B. a back-end server
  C. a back end set

  ---

  https://docs.cloud.oracle.com/iaas/Content/Balance/Tasks/managingloadbalancer.htm?tocpath=Ser vices%7CLoad%20Balancing%7C_____5

  The essential components for load balancing include:

  ?A load balancer with pre-provisioned bandwidth.

  ?A backend set with a health check policy. See Managing Backend Sets. ?Backend servers for your backend set. See Managing Backend Servers. ?One or more listeners . See Managing Load Balancer Listeners. ?Load balancer subnet

  security rules to allow the intended traffic. To learn more about these rules, see Security Rules.

  ?Optionally, you can associate your listeners with SSL server certificate bundles to manage how your system handles SSL traffic. See Managing SSL Certificates

• Question 89:

  Which two statements are true about an Oracle Cloud Infrastructure object storage bucket? (Choose two.)

  A. You can associate a bucket with multiple compartments
  B. You cannot change a bucket from private to public after it is created
  C. You can associate a bucket with only a single compartment
  D. You cannot edit or append data to an object, but you can replace the entire object
  C. You can associate a bucket with only a single compartment
  D. You cannot edit or append data to an object, but you can replace the entire object

  ---

  A bucket is associated with a single compartment.

  You can't edit or append data to an object, but you can replace the entire object.

• Question 90:

  Which statement is NOT true about the Oracle Cloud Infrastructure Object Storage service?

  A. Object storage resources can be shared across tenancies.
  B. Immutable option for data stored in the Object Storage can be set via retention rules.
  C. Object versioning is enabled at namespace level.
  D. Object lifecycle rules can be used to either archive or delete objects.
  B. Immutable option for data stored in the Object Storage can be set via retention rules.

  ---

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/usingversioning.htm