Oracle 1Z0-1072-21 Online Practice Questions and Exam Preparation

Oracle 1Z0-1072-21 Online Questions & Answers

• Question 221:

  Which two are required to create an IPSec VPN connection? (Choose two.)

  A. security list
  B. static route CIDR
  C. name
  D. compute instance
  A. security list
  B. static route CIDR

• Question 222:

  Which three load-balancing policies can be used with a backend set?

  A. throughput
  B. least connections
  C. IP hash
  D. CPU utilization
  E. weighted round robin
  B. least connections
  C. IP hash
  E. weighted round robin

• Question 223:

  Which statement is true about restoring a block volume from a manual or policy-based block volume backup?

  A. It can be restored as new volumes to any Availability Domain within the same region.
  B. It must be restored as new volumes to the same Availability Domain on which the original block volume backup resides.
  C. It can be restored as new volumes to any Availability Domain across different regions.
  D. It can be restored as new volumes with different sizes from the backups.
  A. It can be restored as new volumes to any Availability Domain within the same region.

  ---

  References:

• Question 224:

  Which of the following statement is true regarding Oracle Cloud Infrastructure Object Storage Pre- Authenticated Requests?

  A. It Is not possible to create pre-authenticated requests for "archive" storage tier
  B. Changing the bucket visibility does not change existing pre-authenticated requests
  C. It is not possible to create pre-authenticated requests for the buckets, but only for the objects
  D. Pre-authenticated requests don't have an expiration
  B. Changing the bucket visibility does not change existing pre-authenticated requests

  ---

  Pre-authenticated requests provide a way to let users access a bucket or an object without having their own credentials, as long as the request creator has permissions to access those objects. For example, you can create a request that lets

  an operations support user upload backups to a bucket without owning API keys. Or, you can create a request that lets a business partner update shared data in a bucket without owning API keys.

  When you create a pre-authenticated request, a unique URL is generated. Anyone you provide this URL to can access the Object Storage resources identified in the pre-authenticated request, using standard HTTP tools like curl and wget.

  Understand the following scope and constraints regarding pre-authenticated requests:

  Users can't list bucket contents.

  You can create an unlimited number of pre-authenticated requests. There is no time limit to the expiration date that you can set. You can't edit a pre-authenticated request. If you want to change user access options in response to changing

  requirements, you must create a new pre-authenticated request. The target and actions for a pre-authenticated request are based on the creator's permissions. The request is not, however, bound to the creator's account login credentials. If

  the creator's login credentials change, a pre-authenticated request is not affected. You cannot delete a bucket that has a pre-authenticated request associated with that bucket or with an object in that bucket.

  Understand the following scope and constraints regarding public access:

  Changing the type of access is bi-directional. You can change a bucket's access from public to private or from private to public.

  Changing the type of access doesn't affect existing pre-authenticated requests. Existing pre- authenticated requests still work.

• Question 225:

  Which of the following statements is true about the Oracle Cloud Infrastructure (OCI) Object Storage serverside encryption?

  A. Encryption of data encryption keys with a master encryption key is optional.
  B. Customer-provided encryption keys are always stored in OCI Vault service.
  C. Encryption is enabled by default and cannot be turned off.
  D. Each object in a bucket is always encrypted with the same data encryption key.
  B. Customer-provided encryption keys are always stored in OCI Vault service.

  ---

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/usingyourencryptionkeys.htm

• Question 226:

  You have been tasked with creating one virtual cloud network (VCN) each for two line of business (LOB) applications. LOB A and LOB B will need to communicate with each other. To ensure that you can utilize VCN peering, which network CIDR ranges should be used?

  A. VCN A (10.0.0.0/16) and VCN B (10.1.0.0/16)
  B. VCN A (10.0.2.0/16) and VCN B (10.0.2.0/25)
  C. VCN A (10.0.0.0/16) and VCN B (10.0.16.0/24)
  D. VCN A (172.16.0.0/24) and VCN B (172.16.0.0/28)
  A. VCN A (10.0.0.0/16) and VCN B (10.1.0.0/16)

  ---

  VCN A (10.0.0.0/16) will use a range of IPS from 10.0.0.0 to 10.0.255.255 and VCN B (10.1.0.0/16) will use a range of IPS from 10.1.0.0 to 10.1.255.255 so will not be any Overlap between 2 VCNs

• Question 227:

  You are in the process of setting up a highly available student registration website on Oracle Cloud Infrastructure (OCI). You use a load balancer and a database service on OCI. You launch two compute instances each in a different subnet

  and add them to the back end set of a public load balancer. The load balancer is configured correctly and working. You then deploy the student registration application on these two compute instances. The application can communicate with

  the database service. However, when you type the URL of this student registration application in your browser, no web page appears.

  What could be the cause?

  A. The security lists of the subnets on which the two instances are located do not have "allow" rules for port 80 and 443.
  B. The load balancer performed a health check on the application and found that compute instances were not in a healthy state and terminated the instances.
  C. The client requested https access to the application and the load balancer service does not support end-to-end SSL from the client to the listener to the back-end set.
  D. The Dynamic Routing Gateway is preventing the client traffic from your data center network from reaching the public IP of the load balancer.
  A. The security lists of the subnets on which the two instances are located do not have "allow" rules for port 80 and 443.

• Question 228:

  You are about to upload log file (5 TiB size) to Oracle Cloud Infrastructure object storage and have decided to use multipart upload capability for a more efficient and resilient upload. Which two statements are true about multipart upload? (Choose two.)

  A. Individual object parts can be as small as 10 MiB or as large as 50 GiB
  B. While a multipart upload is still active, you cannot add parts even if the total number of parts is less than 10,000
  C. The maximum size for an uploaded object is 10 TiB
  D. You do not have to commit the upload after you have uploaded all the object parts
  A. Individual object parts can be as small as 10 MiB or as large as 50 GiB
  C. The maximum size for an uploaded object is 10 TiB

  ---

  With multipart upload, you split the object you want to upload into individual parts. Individual parts can be as large as 50 GiB or as small as 10 MiB. (Object Storage waives the minimum part size restriction for the last uploaded part.) Decide what part number you want to use for each part. Part numbers can range from 1 to 10,000. You do not need to assign contiguous numbers, but Object Storage constructs the object by ordering part numbers in ascending order. The maximum size for an uploaded object is 10 TiB While a multipart upload is still active, you can keep adding parts as long as the total number is less than 10,000. https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/usingmultipartuploads.htm

• Question 229:

  Your company has decided to move a few applications to Oracle Cloud Infrastructure and you have been asked to design it for Disaster Recovery (DR). One of the items of your design is to deploy the DR at least 300 miles from the home site and minimize the network latency as much as possible. Based on that, what will be the recommended deployment?

  A. Deploy applications in two separated VCNs in different Availability Domains and use VCN Remote Peering
  B. Deploy applications in different regions and have them connected using VCN Remote Peering
  C. Deploy applications in two separated VCNs in different regions and use VCN Local Peering
  D. Deploy applications on the same region splitting workloads across Availability Domains.
  B. Deploy applications in different regions and have them connected using VCN Remote Peering

• Question 230:

  When you try to create an instance on Oracle Cloud Infrastructure (OCI), what are three valid sources to choose the image from?

  A. Dedicated VM Host
  B. Object Storage
  C. Bare Metal Instance
  D. Platform Images
  E. Custom Image
  F. Partner Images
  G. Instance Pools
  D. Platform Images
  E. Custom Image
  F. Partner Images

  ---

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Compute/Tasks/launchinginstance.htm