Oracle 1Z0-1072-21 Online Practice Questions and Exam Preparation

Oracle 1Z0-1072-21 Online Questions & Answers

• Question 91:

  Your IT department wants to cut down storage costs, but also meet compliance requirements as set up by the central audit group. You have a legacy bucket with both Word does (*.docx) and Excel files (*.xlsx). Your auditors want to retain only Excel files for compliance purposes. Your IT departments wants to keep all other files for 365 days only. What two steps can you take to meet this requirement?

  A. Create Object Storage Lifecycle rules to archive objects from the legacy bucket after 365 days without any pattern matching
  B. Create Object Storage Lifecycle rules to delete objects from the legacy bucket after 365 days with a filter type - include by pattern: ''.docx
  C. It is not possible to meet this requirement
  D. Create Object Storage Lifecycle rules to delete objects from the legacy bucket after 365 days with a filter type - exclude by pattern: ''.xlsx"
  E. Create Object Storage Lifecycle rules to delete objects from the legacy bucket after 365 days without any pattern matching
  B. Create Object Storage Lifecycle rules to delete objects from the legacy bucket after 365 days with a filter type - include by pattern: ''.docx
  D. Create Object Storage Lifecycle rules to delete objects from the legacy bucket after 365 days with a filter type - exclude by pattern: ''.xlsx"

  ---

  Object Lifecycle Management lets you automatically manage the archiving and deletion of objects. By using Object Lifecycle Management to manage your Object Storage and Archive Storage data, you can reduce your storage costs and the amount of time you spend managing data. Use object name filters to specify which objects the lifecycle rule applies to. You can add object filters in any order. Object Lifecycle Management evaluates the precedence of the rules as follows: Pattern exclusions Pattern inclusions Prefix inclusions

• Question 92:

  Which two statements are true about Oracle Cloud Infrastructure IPSec VPN Connect?

  A. Each OCI IPSec VPN consists of multiple redundant IPSec tunnels
  B. OCI IPSec VPN tunnel supports only static routes to route traffic
  C. OCI IPSec VPN can be configured in tunnel mode only
  D. OCI IPSec VPN can be configured in trans port mode only
  A. Each OCI IPSec VPN consists of multiple redundant IPSec tunnels
  C. OCI IPSec VPN can be configured in tunnel mode only

  ---

  VPN Connect provides a site-to-site IPSec VPN between your on-premises network and your virtual cloud network (VCN). The IPSec protocol suite encrypts IP traffic before the packets are transferred from the source to the destination and

  decrypts the traffic when it arrives. On general, IPSec can be configured in the following modes:

  Transport mode: IPSec encrypts and authenticates only the actual payload of the packet, and the header information stays intact.

  Tunnel mode (supported by Oracle): IPSec encrypts and authenticates the entire packet. After encryption, the packet is then encapsulated to form a new IP packet that has different header information.

  Oracle Cloud Infrastructure supports only the tunnel mode for IPSec VPNs. Each Oracle IPSec VPN consists of multiple redundant IPSec tunnels. For a given tunnel, you can use either Border Gateway Protocol (BGP) dynamic routing or

  static routing to route that tunnel's traffic.

  More details about routing follow.

  IPSec VPN site-to-site tunnels offer the following advantages:

  Public internet lines are used to transmit data, so dedicated, expensive lease lines from one site to another aren't necessary.

  The internal IP addresses of the participating networks and nodes are hidden from external users. The entire communication between the source and destination sites is encrypted, significantly lowering the chances of information theft.

• Question 93:

  Which two statements are true about an Oracle Cloud Infrastructure Virtual Cloud Network (VCN)? (Choose two.)

  A. A VCN can reside in multiple Oracle Cloud Infrastructure regions and Availability Domains.
  B. A VCN covers a single contiguous IPv4 CIDR block of your choice.
  C. An allowable VCN size range is: /16 to /30.
  D. A VCN creates the dynamic routing gateway by default.
  B. A VCN covers a single contiguous IPv4 CIDR block of your choice.
  C. An allowable VCN size range is: /16 to /30.

  ---

  VCN resides in a single Oracle Cloud Infrastructure region and covers a single, contiguous IPv4 CIDR block of your choice. The allowable VCN size range is /16 to /30

• Question 94:

  Which two use Oracle dynamic routing gateway (DRG) for connectivity? (Choose two.)

  A. Remote virtual cloud network (VCN) peering across region
  B. Oracle IPsec VPN
  C. Local VCN peering
  D. Oracle Cloud Infrastructure FastConnect public peering
  A. Remote virtual cloud network (VCN) peering across region
  B. Oracle IPsec VPN

  ---

  References:

  https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Concepts/fastconnectoverview.htm You use a DRG when connecting your existing on-premises network to your virtual cloud network (VCN) with one (or both) of these:

  IPSec VPN

  Oracle Cloud Infrastructure FastConnect

  You also use a DRG when peering a VCN with a VCN in a different region:

  Remote VCN Peering (Across Regions)

• Question 95:

  You are designing a high bandwidth, redundant connection between your data center and Oracle Cloud Infrastructure (OCI). While researching for OCI FastConnect locations, you notice that you are co-located with Oracle at one of the Oracle

  FastConnect locations in the Ashburn region.

  What is the recommended design in this scenario?

  A. Create a cross-connect group and have two or more cross-connects in that group. Create an IPsec VPN connection on this group.
  B. Setup two IPsec connections between your data center and OCI Ashburn region. Create a OCI load balancer to distribute the traffic across the two connections.
  C. Create a cross-connect group and have at least two or more cross-connects in that group. Create at least two or more virtual circuits in the group.
  D. Create a cross-connect group and have at least one cross-connect in that group. Create at least one virtual circuit in the group.
  C. Create a cross-connect group and have at least two or more cross-connects in that group. Create at least two or more virtual circuits in the group.

  ---

  You could have multiple private virtual circuits, for example, to isolate traffic from different parts of your organization (one virtual circuit for 10.0.1.0/24; another for 172.16.0.0/16), or to provide redundancy.

• Question 96:

  Your organization has deployed a large, complex application across multiple compute instances in Oracle Cloud Infrastructure (OCI). These compute instances also have block volume storage attached to them. You want to create a time

  consistent backup of these block volume storage.

  Which implementation strategy should be used?

  A. Create a manual backup of each volume
  B. Use scripts available in OCI to backup block volume storage
  C. Group volumes in a volume group first and then use available scripts in OCI
  D. Group volumes in a volume group and create a manual backup of the volume group
  D. Group volumes in a volume group and create a manual backup of the volume group

  ---

  The Oracle Cloud Infrastructure Block Volume service provides you with the capability to group together multiple volumes in a volume group. A volume group can include both types of volumes, boot volumes, which are the system disks for

  your Compute instances, and block volumes for your data storage. You can use volume groups to create volume group backups and clones that are point- in-time and crash-consistent.

  This simplifies the process to create time-consistent backups of running enterprise applications that span multiple storage volumes across multiple instances. You can then restore an entire group of volumes from a volume group backup.

  To create a backup of the volume group

  Open the navigation menu. Under Core Infrastructure, go to Block Storage and click Volumes Groups. In the Volume Groups list, click Create Volume Group Backup in the Actions menu for the volume group you want to create a backup for.

• Question 97:

  A company currently uses Microsoft Active Directory as its identity provider. The company recently purchased Oracle Cloud Infrastructure (OCI) to leverage the cloud platform for its test and development operations. As the administrator, you are now tasked with giving access only to developers so that they can start creating resources in their OCI accounts. Which step will you perform to achieve this requirement?

  A. Create a group for developers on OCI and map the group to a similar group in Microsoft Active Directory during the federation process.
  B. Federate all Microsoft Active Directory groups with OCI to allow users to use their existing credentials.
  C. Create a new user account for each user, and then create policies to provide access to developers.
  D. Create a group for developers on OCI, export all the developers from Microsoft Active Directory, and then import them into the Identity and Access Management (IAM) group.
  A. Create a group for developers on OCI and map the group to a similar group in Microsoft Active Directory during the federation process.

• Question 98:

  You have an application deployed in Oracle Cloud Infrastructure running only in the Phoenix region. You were asked to create a disaster recovery (DR) plan that will protect against the loss of critical dat

  A. The DR site must be at least 500 miles from your primary site and data transfer between the two sites must not traverse the public Internet. Which is the recommended disaster recovery plan?
  B. Create a new virtual cloud network (VCN) in the Phoenix region and create a subnet in one availability domain (AD) that is not currently being used by your production systems. Establish VCN peering between the production and DR sites.
  C. Create a DR environment in Ashburn. Associate a DRG with the VCN in each region and create a remote peering connection between the two VCNs.
  D. Create a DR environment in Ashburn and provision a FastConnect virtual circuit using DRG between the regions.
  E. Create a DR environment in Ashburn. Associate a dynamic routing gateway (DRG) with the VCN in each region and configure an IPsec VPN connection between the two regions.
  B. Create a new virtual cloud network (VCN) in the Phoenix region and create a subnet in one availability domain (AD) that is not currently being used by your production systems. Establish VCN peering between the production and DR sites.

  ---

  Remote VCN peering is the process of connecting two VCNs in different regions (but the same tenancy ). The peering allows the VCNs' resources to communicate using private IP addresses without routing the traffic over the internet or

  through your on-premises network. Without peering, a given VCN would need an internet gateway and public IP addresses for the instances that need to communicate with another VCN in a different region.

  At a high level, the Networking service components required for a remote peering include:

  -

  Two VCNs with non-overlapping CIDRs, in different regions that support remote peering. The VCNs must be in the same tenancy.

  -

  A dynamic routing gateway (DRG) attached to each VCN in the peering relationship. Your VCN already has a DRG if you're using an IPSec VPN or an Oracle Cloud Infrastructure FastConnect private virtual circuit.

  A remote peering connection (RPC) on each DRG in the peering relationship.

  A connection between those two RPCs.

  Supporting route rules to enable traffic to flow over the connection, and only to and from select subnets in the respective VCNs (if desired).

  Supporting security rules to control the types of traffic allowed to and from the instances in the subnets that need to communicate with the other VCN.

  

• Question 99:

  You are an administrator with an application running in Oracle Cloud Infrastructure (OCI). The company has a fleet of OCI compute virtual instances behind an load balancer. The load balancer backend set health check API is providing a 'Critical' level warning. You have confirmed that your application Is running healthy on the backend servers. What Is the possible reason for this 'Critical' warning?

  A. The load balancer listener is not configured correctly.
  B. The security list associated with the subnet In which the backend server is provisioned does not include the IP range for the source of the health check requests.
  C. A user does not have correct Identity and Access Management (IAM) credentials on the backend servers.
  D. The route table associated with the subnet in which the backend server is provisioned does not include the route for the OCI load balancer.
  B. The security list associated with the subnet In which the backend server is provisioned does not include the IP range for the source of the health check requests.

• Question 100:

  A customer has launched a compute Instance in the Virtual Cloud Network (VCN), which has an Internet gateway, a service gateway, a default security lists and a default route table. Customer has opened up Port 22 in the security lists

  attached to the compute instance subnet, however is still unable to connect to compute instances using ssh.

  Which option would remedy this situation?

  A. Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table. Destination CIDR: 0.0.0.0/0 Target: Internet Gateway (IGW)
  B. Modify the security list associated with the VCN subnet in which the instance resides. Add a stateful egress rule to allow icmp traffic in addition to the port 22.
  C. Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table. Destination CIDR: 0.0.0.0/0 Target: Dynamic Routing Gateway (DRG)
  D. Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table. Destination CIDR: 0.0.0.0/0 Target: Service Gateway (SGW)
  A. Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table. Destination CIDR: 0.0.0.0/0 Target: Internet Gateway (IGW)

  ---

  You create an internet gateway in the context of a specific VCN. In other words, the internet gateway is automatically attached to a VCN. However, you can disable and re-enable the internet gateway at any time.

  For traffic to flow between a subnet and an internet gateway, you must create a route rule accordingly in the subnet's route table (for example, destination CIDR = 0.0.0.0/0 and target = internet gateway). If the internet gateway is disabled, that

  means no traffic will flow to or from the internet even if there's a route rule that enables that traffic. For the purposes of access control, you must specify the compartment where you want the internet gateway to reside. If you're not sure which

  compartment to use, put the internet gateway in the same compartment as the cloud network.