Oracle 1Z0-1072-21 Online Practice Questions and Exam Preparation

Oracle 1Z0-1072-21 Online Questions & Answers

• Question 231:

  You created a public subnet and an internet gateway in your virtual cloud network (VCN) of Oracle Cloud Infrastructure. The public subnet has an associated route table and security list. However, after creating several compute instances in the public subnet, none can reach the Internet. Which two are possible reasons for the connectivity issue? (Choose two.)

  A. The route table has no default route for routing traffic to the internet gateway.
  B. There is no stateful egress rule in the security list associated with the public subnet.
  C. There is no dynamic routing gateway (DRG) associated with the VCN.
  D. There is no stateful ingress rule in the security list associated with the public subnet.
  E. A NAT gateway is needed to enable the communication flow to internet.
  A. The route table has no default route for routing traffic to the internet gateway.
  B. There is no stateful egress rule in the security list associated with the public subnet.

  ---

  An internet gateway as an optional virtual router that connects the edge of the VCN with the internet. To use the gateway, the hosts on both ends of the connection must have public IP addresses for routing. Connections that originate in your VCN and are destined for a public IP address (either inside or outside the VCN) go through the internet gateway. Connections that originate outside the VCN and are destined for a public IP address inside the VCN go through the internet gateway. Working with Internet Gateways You create an internet gateway in the context of a specific VCN. In other words, the internet gateway is automatically attached to a VCN. However, you can disable and re-enable the internet gateway at any time. Compare this with a dynamic routing gateway (DRG), which you create as a standalone object that you then attach to a particular VCN. DRGs use a different model because they're intended to be modular building blocks for privately connecting VCNs to your on-premises network. For traffic to flow between a subnet and an internet gateway, you must create a route rule accordingly in the subnet's route table (for example, destination CIDR = 0.0.0.0/0 and target = internet gateway). If the internet gateway is disabled, that means no traffic will flow to or from the internet even if there's a route rule that enables that traffic. For more information, see Route Tables. For the purposes of access control, you must specify the compartment where you want the internet gateway to reside. If you're not sure which compartment to use, put the internet gateway in the same compartment as the cloud network. For more information, see Access Control. You may optionally assign a friendly name to the internet gateway. It doesn't have to be unique, and you can change it later. Oracle automatically assigns the internet gateway a unique identifier called an Oracle Cloud ID (OCID). For more information, see Resource Identifiers. To delete an internet gateway, it does not have to be disabled, but there must not be a route table that lists it as a target. AS per compute instances can connect to the Internet so you use egress no ingress

• Question 232:

  For a compute instance that is launched in a private subnet in a Virtual Cloud Network (VCN), which action needs to be performed to connect to the Internet, assuming that the required security list is properly set up?

  A. Assign a Public IP address to the compute instance.
  B. Create and configure Network Address Translation (NAT) in a public subnet and route all traffic to it.
  C. There is no way for an instance in a private subnet to connect to the Internet.
  D. Create a default route entry in the route table to forward all traffic to the Internet gateway.
  D. Create a default route entry in the route table to forward all traffic to the Internet gateway.

• Question 233:

  Which is a customer's responsibility on an Oracle Cloud Infrastructure database?

  A. patching the database and OS
  B. creating the first default database on the DBCS server
  C. creating an ASM diskgroup for data file or temp file storage
  D. installing the operating system (OS), Grid Infrastructure, and database software
  A. patching the database and OS

  ---

  On autonomous there's no patching needed. But on the regular DB Cloud services you need to patch the DB and the OS. During the creation on the OCDB the first DB is created automatically Oracle automatically takes care of Operating system Installation/Configuration, Grid Infrastructure, ASM diskgroup Creation/Configuration , and database software Installation and first database on the DB System. that's all when Creating DB Systems. and then the customer responsible to apply the patches to the database and OS

• Question 234:

  Which option lists Virtual Cloud Networks (VCNs) that can be peered?

  A. VCN A (172.16.0.0/24) and VCN B (172.16.0.0/28)
  B. VCN A (10.0.0.0/16) and VCN B (10.1.0.0/16)
  C. VCN A (10.0.2.0/16) and VCN B (10.0.2.0/25)
  D. VCN A (10.0.0.0/16) and VCN B (10.0.16.0/24)
  B. VCN A (10.0.0.0/16) and VCN B (10.1.0.0/16)

• Question 235:

  Which three must be configured for a load balancer to accept incoming traffic? (Choose two.)

  A. a listener
  B. a back-end server
  C. a back end set
  D. a security list that is open on a listener port
  E. a certificate
  A. a listener
  B. a back-end server
  C. a back end set

  ---

  https://docs.cloud.oracle.com/iaas/Content/Balance/Tasks/managingloadbalancer.htm?tocpath=Ser vices%7CLoad%20Balancing%7C_____5

  The essential components for load balancing include:

  ?A load balancer with pre-provisioned bandwidth.

  ?A backend set with a health check policy. See Managing Backend Sets. ?Backend servers for your backend set. See Managing Backend Servers. ?One or more listeners . See Managing Load Balancer Listeners. ?Load balancer subnet

  security rules to allow the intended traffic. To learn more about these rules, see Security Rules.

  ?Optionally, you can associate your listeners with SSL server certificate bundles to manage how your system handles SSL traffic. See Managing SSL Certificates

• Question 236:

  Which storage service is used on OCI for a Data Transfer Service job?

  A. An instance with enough storage to accommodate the job
  B. An object bucket
  C. A File System service instance
  D. Block Volume
  B. An object bucket

  ---

  https://docs.cloud.oracle.com/en-us/iaas/Content/DataTransfer/Concepts/overview.htm

• Question 237:

  Which three are capabilities of the dbaascli utility? (Choose three.)

  A. Patching the primary database deployment
  B. Open port 1521 in the VCN to allow for traffic to the listener
  C. Start and open the database instance
  D. Switchover and failover in an Oracle Guard configuration
  E. Clone a DB
  A. Patching the primary database deployment
  C. Start and open the database instance
  D. Switchover and failover in an Oracle Guard configuration

  ---

  https://docs.oracle.com/en/cloud/paas/database-dbaas-cloud/csdbi/dbaascli.html Using the dbaascli utility, you can:

  Change the password of a database user.

  Start and stop a database.

  Start and stop the Oracle Net listener

  Check the status of the Oracle Data Guard configuration. Perform switchover and failover in an Oracle Data Guard configuration.

  Patch the database deployment.

  Perform database recovery.

  Rotate the master encryption key.

  https://docs.oracle.com/en/cloud/paas/database-dbaas-cloud/csdbi/dbaascli.html

• Question 238:

  Which two tagging related items are valid attributes that may be included in payload of an audit log event? (Choose two.)

  A. Predefined values
  B. Free-form tags
  C. Tag variables
  D. Defined tags
  E. Cost-tracking tags
  F. Default tags
  B. Free-form tags
  D. Defined tags

  ---

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Audit/Reference/logeventreference.htm#payload

• Question 239:

  You want an Oracle Cloud Infrastructure (OCI) compute instance in your compartment to make API calls to other services within OCI without storing credentials in a configuration file. What do you need to do?

  A. Create a dynamic group with appropriate matching rules to include the instance, and reference this group in your IAM policy statement
  B. Instances cannot access services outside their compartment
  C. VM instances are treated as users. Create a user, assign the user to that VM instance, and reference the instance in your Identity and Access Management (IAM) policy statement
  D. By default, all VM instances are created with an instance principal. Reference this instance principal in your IAM policy statement
  A. Create a dynamic group with appropriate matching rules to include the instance, and reference this group in your IAM policy statement