Oracle 1Z0-1072-21 Online Practice Questions and Exam Preparation

Oracle 1Z0-1072-21 Online Questions & Answers

• Question 161:

  You are designing a networking infrastructure in multiple Oracle Cloud Infrastructure regions and require connectivity between workloads in each region. You have created a dynamic routing gateway (DRG) and a remote peering connection.

  However, your workloads are unable to communicate with each other.

  What are two reasons for this? (Choose two.)

  A. The security lists associated with subnets in each virtual cloud network (VCN) do not have the appropriate ingress rules
  B. Identity and Access Management (IAM) policies have not been defined to allow connectivity across the two VCNs in different regions
  C. A local peering gateway needs to be created in each VCN with a default route rule added in the route table forwarding the traffic to the local peering gateway
  D. An Internet gateway needs to be created in each VCN with a default route rule added in the route table forwarding the traffic to the Internet Gateway
  E. The route table associated with subnets in each VCN do not have a route rule defined to forward the traffic to their respective DRGs
  A. The security lists associated with subnets in each virtual cloud network (VCN) do not have the appropriate ingress rules
  E. The route table associated with subnets in each VCN do not have a route rule defined to forward the traffic to their respective DRGs

  ---

  Setting Up a Remote Peering

  Create the RPCs: Each VCN administrator creates an RPC for their own VCN's DRG. Share information: The administrators share the basic required information. Set up the required IAM policies for the connection: The administrators set up

  IAM policies to enable the connection to be established.

  Establish the connection: The requestor connects the two RPCs (see Important Remote Peering Concepts for the definition of the requestor and acceptor). Update route tables: Each administrator updates their VCN's route tables to enable

  traffic between the peered VCNs as desired.

  Update security rules: Each administrator updates their VCN's security rules to enable traffic between the peered VCNs as desired.

• Question 162:

  You have the following compartment structure in your tenancy. Root compartment->Training- >Training-subl ->Training-sub2 You create a policy in the root compartment to allow the default admin for the account (Administrators) to manage

  block volumes in compartment Training-sub2.

  What policy would you write to meet this requirement?

  A. Allow group Administrators to manage volume-family in root compartment
  B. Allow group Administrators to manage volume-family in compartment Training-sub1 :Training- sub2
  C. Allow group Administrators to manage volume-family in compartment Training: Training-sub 1 :Training-sub2
  D. Allow group Administrators to manage volume-family in compartment Training-sub2
  C. Allow group Administrators to manage volume-family in compartment Training: Training-sub 1 :Training-sub2

  ---

  a policy statement must specify the compartment for which access is being granted (or the tenancy). Where you create the policy determines who can update the policy. If you attach the policy to the compartment or its parent, you can simply specify the compartment name. If you attach the policy further up the hierarchy, you must specify the path. The format of the path is each compartment name (or OCID) in the path, separated by a colon: :: . . . For example, assume you have a three-level compartment hierarchy, shown here:

  

  You want to create a policy to allow NetworkAdmins to manage VCNs in CompartmentC. If you want to attach this policy to CompartmentC or to its parent, CompartmentB, write this policy statement:

  Allow group NewtworkAdmins to manage virtual-network-family in compartment CompartmentC However, if you want to attach this policy to CompartmentA (so that only administrators of CompartmentA can modify it), write this policy

  statement that specifies the path:

  Allow group NewtworkAdmins to manage virtual-network-family in compartment CompartmentB:CompartmentC

  To attach this policy to the tenancy, write this policy statement that specifies the path from CompartmentA to CompartmentC:

  Allow group NewtworkAdmins to manage virtual-network-family in compartment CompartmentA:CompartmentB:CompartmentC

• Question 163:

  Which two methods are supported for migrating your on-premises Oracle database to an Oracle Autonomous Transaction Processing (ATP) database in Oracle Cloud Infrastructure? (Choose two.)

  A. Load text files into ATP using SQL Developer.
  B. Use RMAN duplicate.
  C. Use Oracle Data Pump.
  D. Transfer the physical database files and re-create the database.
  E. Use database backup and restore.
  C. Use Oracle Data Pump.
  D. Transfer the physical database files and re-create the database.

  ---

  Reference:

  https://docs.oracle.com/en/solutions/migrate-to-atp/index.html#GUID-28E5A683-6DC6-4A07- BB1C-55F020D4C1CD

• Question 164:

  Your company decided to move a few applications to Oracle Cloud Infrastructure (OCI) in the US West (us-phoenix-1) region.

  You need to design a cloud-based disaster recovery (DR) solution with a requirement to deploy the DR resources in the US East (us-ashburn-1) region to minimize network latency.

  What is the recommended deployment?

  A. Deploy production and DR applications in two separate virtual cloud networks (VCNs), each in different regions, and then use VCN local peering gateways for connectivity.
  B. Deploy production and DR applications in two separate VCNs, each in different regions. Connect them using a VCN remote peering connection.
  C. Deploy production and DR applications in the same VCN. Create production subnets in one AD, and DR subnets in another AD (assume a multi-AD region).
  D. Deploy production and DR applications in two separate VCNs in different availability domains (ADs) within the primary region, and then use a VCN remote peering connection for connectivity.
  A. Deploy production and DR applications in two separate virtual cloud networks (VCNs), each in different regions, and then use VCN local peering gateways for connectivity.

  ---

  Remote VCN peering is the process of connecting two VCNs in different regions The peering allows the VCNs' resources to communicate using private IP addresses without routing the traffic over the internet or through your on-premises network.

• Question 165:

  In which two ways does Oracle Cloud Infrastructure (OCI) file storage (FSS) differ from OCI object storage and block volume services? (Choose two.)

  A. Block volume service is NVMe based, while FSS is not
  B. Object storage and block volume services offer default encryption, but FSS does not
  C. A file system is created within an availability domain, whereas object storage buckets exist at the region level
  D. FSS uses the network file system (NFS) protocol, whereas block volume uses iSCSI
  C. A file system is created within an availability domain, whereas object storage buckets exist at the region level
  D. FSS uses the network file system (NFS) protocol, whereas block volume uses iSCSI

• Question 166:

  Which two statements about file storage service (FSS) are accurate? (Choose two.)

  A. FSS leverages UNIX user group and permission checking for file access security
  B. Encryption of file system in FSS is optional
  C. Identity and Access Management (IAM) controls which file systems are mountable by which instances
  D. Security lists can be used as a virtual firewall to prevent an instance from mounting an FSS mount target within the same subnet
  E. Data in transit to an FSS mount target is encrypted
  A. FSS leverages UNIX user group and permission checking for file access security
  E. Data in transit to an FSS mount target is encrypted

  ---

  All data is encrypted at rest. and In-transit encryption provides a way to secure your data between instances and mounted file systems using TLS v. 1.2 (Transport Layer Security) encryption. File Storage service supports the AUTH_UNIX style of authentication and permission checking for remote NFS client requests.

• Question 167:

  You have one database-style application that frequently makes many random reads and writes across the dataset. Which storage offering supports this application?

  A. Object Storage Service
  B. Archive Storage Service
  C. File Storage Service
  D. Block Storage Service
  D. Block Storage Service

• Question 168:

  You must implement a backup solution for your Autonomous Data Warehouse (ADW) that will enable you to restore data as old as one year with a recovery point objective (RPO) of 10 days. Which database backup strategy would you select?

  A. Take weekly manual backups to supplement the automated backups and preserve them for 12 months.
  B. Use the automated backups.
  C. Take monthly manual backups to supplement the automated backups and preserve them for 12 months.
  D. Take quarterly manual backups to supplement the automated backups and preserve them for 12 months.
  B. Use the automated backups.

  ---

  Oracle Cloud Infrastructure automatically backs up your Autonomous Databases and retains these backups for 60 days. Automatic backups are weekly full backups and daily incremental backups. You can also create manual backups to supplement your automatic backups. Manual backups are stored in an Object Storage bucket that you create, and are retained for 60 days The retention period for manual backups is the same as automatic backups which is 60 days. So we cannot preserve the backup for 12 months https://docs.oracle.com/en/cloud/paas/autonomous-data-warehouse-cloud/user/backup- manual.html#GUID-D95E5D6A-C470-4A68-9545-CC99D937E7D1

• Question 169:

  Which statement is true about the Oracle Cloud Infrastructure File Storage Service Mount Target?

  A. You can access multiple file systems through a single mount target
  B. Mount target has a public IP address and DNS name
  C. Mount target lives in a single subnet of your choice, but is not highly available
  D. Each mount target requires six internal IP addresses in the subnet to function
  A. You can access multiple file systems through a single mount target

  ---

  A mount target is an NFS endpoint that lives in a VCN subnet of your choice and provides network access for file systems. The mount target provides the IP address or DNS name that is used together with a unique export path to mount the file system. A single mount target can export many file systems. Typically, you create your first mount target and export when you create your first file system. The mount target maintains an export set which contains all of the exports for its associated file systems. Limitations and Considerations

  Each availability domain is limited to two mount targets by default. However, you can export up to 100 file systems through each mount target.

  See Service Limits for a list of applicable limits and instructions for requesting a limit increase. Each mount target requires three internal IP addresses in the subnet to function. Two of the IP addresses are used during mount target creation.

  The third IP address must remain available for the mount target to use for high availability failover.

  The File Storage service doesn't "reserve" the third IP address required for high availability failover. Use care when designing your subnets and file systems to ensure that sufficient IP addresses remain available for your mount targets.

• Question 170:

  Which two statements are true about restoring a volume from a block volume backup in Oracle Cloud Infrastructure Block Volume service?

  A. You can restore a volume from any full volume backup but not from an Incremental backup.
  B. You can only restore a volume to the same availability domain in which the original block volume resides.
  C. You can restore a block volume backup to a larger volume size.
  D. You can restore a volume to any availability domain within the same region where the backup is stored.
  E. You can restore only one volume from a manual block volume backup.
  C. You can restore a block volume backup to a larger volume size.
  D. You can restore a volume to any availability domain within the same region where the backup is stored.

  ---

  Reference https://docs.cloud.oracle.com/enus/iaas/Content/Block/Tasks/restoringavolumefromabackup.htm