Oracle 1Z0-1072-21 Online Practice Questions and Exam Preparation

Oracle 1Z0-1072-21 Online Questions & Answers

• Question 151:

  Which two are true for Oracle Cloud Infrastructure DNS? (Choose two.)

  A. It can function only as a primary DNS.
  B. It supports other cloud providers such as AWS and Azure.
  C. It supports segregation of traffic by using the private pool.
  D. It does not provide DDoS protection.
  B. It supports other cloud providers such as AWS and Azure.
  C. It supports segregation of traffic by using the private pool.

  ---

  References: B ?Support for Oracle Cloud Infrastructure, other Cloud provider endpoints (AWS, Azure) and private assets, including Cloud, CDNs and Data Centers C ?Customers may purchase Oracle Cloud Infrastructure Private Pool and Vanity Nameserver to have their Domain Names and Zones under a private IP pool with dedicated nameservers to segregate from those of other customers in order to reduce the risk of external issues affecting their websites. https://www.oracle.com/cloud/networking/dns-faq.html

• Question 152:

  Which two statements are true about Oracle Cloud Infrastructure storage services?

  A. You can move Object Storage buckets, Block Volumes and File Storage mount targets between compartments.
  B. File storage mount target does not provide a private IP address, while the Object Storage bucket provides one.
  C. File Storage uses the network file system (NFS) protocol, whereas Block Volume uses ISCSI.
  D. Block Volume service scales to Exabytes per Instance, while File Storage service offers unlimited scalability.
  E. You can take Incremental snapshots of Block Volumes, File Storage file systems and Object Storage buckets.
  A. You can move Object Storage buckets, Block Volumes and File Storage mount targets between compartments.
  C. File Storage uses the network file system (NFS) protocol, whereas Block Volume uses ISCSI.

• Question 153:

  Which two resources reside exclusively in a single Oracle Cloud Infrastructure Availability Domain?

  A. Identity and Access Management Groups
  B. Web Application Firewall policy
  C. Block volume
  D. Compute Instance
  E. Object Storage
  C. Block volume
  D. Compute Instance

  ---

  https://docs.cloud.oracle.com/iaas/Content/General/Concepts/regions.htm#one

• Question 154:

  Which two statements are true about policies?

  A. You can use read, write, manage, and inspect as verbs for defining a policy.
  B. A policy is a document that specifies who can access which Oracle Cloud Infrastructure resources that your company has, and how.
  C. Users need not do anything but still have to be added to a group with appropriate policies defined.
  D. You can deny access to a group via policies.
  B. A policy is a document that specifies who can access which Oracle Cloud Infrastructure resources that your company has, and how.
  C. Users need not do anything but still have to be added to a group with appropriate policies defined.

• Question 155:

  You have an instance running in a development compartment that needs to make API calls against other OCI services, but you do not want to configure user credentials or a store a configuration file on the instance. How can you meet this requirement?

  A. Create a dynamic group with matching rules to include your instance
  B. Instances can automatically make calls to other OCI services
  C. Instances are secure and cannot make calls to other OCI services
  D. Create a dynamic group with matching rules to include your instance and write a policy for this dynamic group
  D. Create a dynamic group with matching rules to include your instance and write a policy for this dynamic group

  ---

  Dynamic groups allow you to group Oracle Cloud Infrastructure computer instances as "principal" actors (similar to user groups). When you create a dynamic group, rather than adding members explicitly to the group, you instead define a set of matching rules to define the group members. For example, a rule could specify that all instances in a particular compartment are members of the dynamic group. The members can change dynamically as instances are launched and terminated in that compartment. A dynamic group has no permissions until you write at least one policy that gives that dynamic group permission to either the tenancy or a compartment. When writing the policy, you can specify the dynamic group by using either the unique name or the dynamic group's OCID. Per the preceding note, even if you specify the dynamic group name in the policy, IAM internally uses the OCID to determine the dynamic group.

• Question 156:

  Where is the tenancy Oracle Cloud Identifier (OCID) located?

  A. given by support on account creation
  B. at the bottom of every console page
  C. on the Identity ?Users page
  D. contained within the compartment OCID
  D. contained within the compartment OCID

  ---

  Identity > Compartments >(The root Compartment of the tenancy)

• Question 157:

  You are planning to deploy a multi-region web application in Oracle Cloud Infrastructure (OCI). You have customers in North America, Asia and Europe who will access the application. What service is available in OCI to help you choose the regions the lowest latency to these markets?

  A. Internet Intelligence
  B. FastConnect
  C. IPsec VPN
  D. DNS Zone Management
  A. Internet Intelligence

• Question 158:

  Which two statements are true about data guard service on DB Systems in Oracle Cloud Infrastructure (OCI)? (Choose two.)

  A. Data guard implementation requires two DB Systems, one running the primary database on a virtual machine and the standby database running on bare metal
  B. Data guard configuration on the OCI is limited to one standby database per primary database
  C. Data guard configuration on the OCI is limited to a virtual machine only
  D. Data guard implementation requires two DB Systems, one containing the primary database and one containing the standby database
  B. Data guard configuration on the OCI is limited to one standby database per primary database
  D. Data guard implementation requires two DB Systems, one containing the primary database and one containing the standby database

• Question 159:

  You deployed a database on a Standard Compute instance in Oracle Cloud Infrastructure (OCI) due to cost concerns. The database requires additional storage with high I/O and you decided to use OCI Block Volume service for it. With this requirement in mind, which elastic performance option should you choose for the Block Volume?

  A. Balanced Performance
  B. Higher performance
  C. Extreme performance
  D. Lower cost
  B. Higher performance

  ---

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Block/Concepts/blockvolumeperformance.htm

• Question 160:

  You deployed a web server in Oracle Cloud Infrastructure using an ephemeral public IP. After a few changes in your web server configuration, you rebooted the server and a new public IP was associated to your instance. What should you do to prevent this from happening again?

  A. Create a reserved public IP and associate it with the security list that your complete instance is using
  B. Create a reserved public IP and associate it with the subnet of your compute instance
  C. Create a reserved public IP and associate it with the VNIC of your compute instance
  D. Create a reserved public IP and associate it with the hosts file of your web server
  C. Create a reserved public IP and associate it with the VNIC of your compute instance

  ---

  A public IP address is an IPv4 address that is reachable from the internet. If a resource in your tenancy needs to be directly reachable from the internet, it must have a public IP address. Depending on the type of resource, there might be other

  requirements.

  There are two types of public IPs:

  Ephemeral: Think of it as temporary and existing for the lifetime of the instance. Reserved: Think of it as persistent and existing beyond the lifetime of the instance it's assigned to. You can unassign it and then reassign it to another instance

  whenever you like. Exception: reserved public IPs on public load balancers.

  To create a new reserved public IP in your pool

  Confirm you're viewing the region and compartment where you want to create the reserved public IP.

  Open the navigation menu. Under Core Infrastructure, go to Networking and click Public IPs.

  Click Create Reserved Public IP.

  Enter the following:

  Name: An optional friendly name for the reserved public IP. The name doesn't have to be unique, and you can change it later. Avoid entering confidential information.

  Compartment: Leave as is.

  Tags:Optionally, you can apply tags. If you have permissions to create a resource, you also have permissions to apply free-form tags to that resource. To apply a defined tag, you must have permissions to use the tag namespace. For more

  information about tagging, see Resource Tags. If you are not sure if you should apply tags, skip this option (you can apply tags later) or ask your administrator.

  Click Create Reserved Public IP.

  To assign a reserved public IP to a private IP

  Prerequisite: The private IP must not have an ephemeral or reserved public IP already assigned to it. If it does, first delete the ephemeral public IP, or unassign the reserved public IP. Confirm you're viewing the compartment that contains the

  instance with the private IP you're interested in.

  Open the navigation menu. Under Core Infrastructure, go to Compute and click Instances.

  Click the instance to view its details.

  Under Resources, click Attached VNICs.

  The primary VNIC and any secondary VNICs attached to the instance are displayed.

  Click the VNIC you're interested in.

  Under Resources, click IP Addresses.

  The VNIC's primary private IP and any secondary private IPs are displayed. For the private IP you're interested in, click the Actions icon (three dots), and then click Edit. In the Public IP Address section, for Public IP Type, select the radio

  button for Reserved Public IP.

  Enter the following:

  Compartment: The compartment that contains the reserved public IP you want to assign. Reserved Public IP: The reserved public IP you want to assign. You have three choices:

  Create a new reserved public IP. You may optionally provide a friendly name for it. The name doesn't have to be unique, and you can change it later. Avoid entering confidential information. Assign a reserved public IP that is currently

  unassigned.

  Move a reserved public IP from another private IP.

  Click Update.