Oracle 1Z0-1072-21 Online Practice Questions and Exam Preparation

Oracle 1Z0-1072-21 Online Questions & Answers

• Question 81:

  You created a public subnet and an internet gateway in your virtual cloud network (VCN) of Oracle Cloud Infrastructure. The public subnet has an associated route table and security list. However, after creating several compute instances In the public subnet, none can reach the Internet. Which two are possible reasons for the connectivity Issue?

  A. A NAT gateway is needed to enable the communication flow to internet.
  B. There Is no stateful egress rule In the security list associated with the public subnet.
  C. There Is no dynamic routing gateway (DRG) associated with the VCN.
  D. The route table has no default route for routing traffic to the internet gateway.
  E. There is no stateful ingress rule in the security list associated with the public subnet.
  B. There Is no stateful egress rule In the security list associated with the public subnet.
  D. The route table has no default route for routing traffic to the internet gateway.

• Question 82:

  How can you provide users access to an existing compartment?

  A. by granting users access to a compartment when the compartment is created
  B. by adding users to a group and defining a policy to provide the group access to the compartment
  C. by adding users to a compartment. All users in the compartment will have access to the objects in the compartment.
  D. by granting access directly to the user when the user is created
  B. by adding users to a group and defining a policy to provide the group access to the compartment

  ---

  A policy is a document that specifies who can access which Oracle Cloud Infrastructure resources that your company has, and how. A policy simply allows a group to work in certain ways with specific types of resources in a particular

  compartment

  In general, here's the process an IAM administrator in your organization needs to follow:

  Define users, groups, and one or more compartments to hold the cloud resources for your organization.

  Create one or more policies, each written in the policy language. Place users into the appropriate groups depending on the compartments and resources they need to work with.

  Provide the users with the one-time passwords that they need in order to access the Console and work with the compartments. For more information,

• Question 83:

  A company currently uses Microsoft Active Directory as its identity provider. The company recently subscribed to Oracle Cloud Infrastructure (OCI) to leverage the cloud platform for test and development. As the administrator, you configured

  the OCI tenancy to be federated with Microsoft Active Directory. Now you need to give access to developers so that they can start creating resources in their OCI accounts.

  Which step will you perform to make sure you are not duplicating user creation inside of OCI tenancy?

  A. Create a group for developers on OCI and map the group to a similar group in Microsoft Active Directory during the federation process.
  B. Create a new user account in OCI for each user, and then create policies to provide access to developers.
  C. Create a group for developers on OCI, export all the developers from Microsoft Active Directory, and then import them into the Identity and Access Management (IAM) group.
  D. Create a single user account in OCI, and then create policies to provide access to developers to this single account.
  A. Create a group for developers on OCI and map the group to a similar group in Microsoft Active Directory during the federation process.

  ---

  When working with your IdP, your administrator defines groups and assigns each user to one or more groups according to the type of access the user needs. Oracle Cloud Infrastructure also uses the concept of groups (in conjunction with IAM policies) to define the type of access a user has. As part of setting up the relationship with the IdP, your administrator can map each IdP group to a similarly defined IAM group, so that your company can re-use the IdP group definitions when authorizing user access to Oracle Cloud Infrastructure resources.

• Question 84:

  You are a system administrator of your company and you are asked to manage updates and patches across all your compute instances running Oracle Linux in Oracle Cloud Infrastructure (OCI). As part of your task, you need to apply all the latest kernel security updates to all instances. Which OCI service will allow you to complete this task?

  A. Resource Manager
  B. OS Management
  C. Storage Gateway
  D. Streaming
  E. Registry
  B. OS Management

  ---

  Reference: https://blogs.oracle.com/cloud-infrastructure/os-management-with-oracle-cloud-infrastructure

• Question 85:

  You are deploying a highly available web application in Oracle Cloud Infrastructure and have decided to use a public load balancer. The back-end web servers will be distributed across all three availability domains (ADs). How many subnets should you create to deliver a secure highly available application?

  A. three subnets in total; one subnet in each AD
  B. five subnets in total; two subnets each in the first and second AD with a single subnet in the third AD
  C. six subnets in total; two subnets in each AD; one for the load balancer and one for the web servers
  D. four subnets in total; one subnet in each AD for the web servers and a single subnet in any one AD for the load balancer
  C. six subnets in total; two subnets in each AD; one for the load balancer and one for the web servers

• Question 86:

  Which statement is true about Data Guard Implementation in DB systems?

  A. Both DB systems must be in the same compartment, and they must be the same shape
  B. You can define the backup window and set custom backup retention period for the automatic database backup schedule.
  C. You cannot manage Oracle database initialization parameters at a global level.
  D. You cannot manage the database as sys/sysdba.
  A. Both DB systems must be in the same compartment, and they must be the same shape

  ---

  An Oracle Data Guard implementation requires two DB systems, one containing the primary database and one containing the standby database. When you enable Oracle Data Guard for a virtual machine DB system database, a new DB

  system with the standby database is created and associated with the primary database. For a bare metal DB system, the DB system with the database that you want to use as the standby must already exist before you enable Oracle Data

  Guard.

  Requirement details are as follows:

  -Both DB systems must be in the same compartment.

  -

  The DB systems must be the same shape type (for example, if the shape of the primary database is a virtual machine, then the shape of the standby database can be any other virtual machine shape).

  -

  If your primary and standby databases are in different regions, then you must peer the virtual cloud networks (VCNs) for each database. See Remote VCN Peering (Across Regions).

  -

  Configure the security list ingress and egress rules for the subnets of both DB systems in the Oracle Data Guard association to enable TCP traffic to move between the applicable ports. Ensure that the rules you create are stateful (the default).

• Question 87:

  Which two options are necessary for achieving high availability on Oracle Cloud Infrastructure?

  A. Store your database across multiple regions so that half of the data resides in one region and the other half resides in another region.
  B. Attach your block volume form Availability Domain 1 to a compute instance in Availability Domain 2 (and vice versa) so that they are highly available.
  C. Configure your database to have Data Guard in another Availability Domain in Sync mode within a region.
  D. Store your database files on Object Storage so that they are available in all Availability Domains in all regions.
  E. Distribute your application servers across all Availability Domains within a region.
  C. Configure your database to have Data Guard in another Availability Domain in Sync mode within a region.
  E. Distribute your application servers across all Availability Domains within a region.

  ---

  All details can find in "Best Practices for Deploying High Availability Architecture on Oracle Cloud Infrastructure" https://docs.cloud.oracle.com/en-us/iaas/Content/Resources/Assets/whitepapers/best-practices- deploying-ha-architecture-oci.pdf

• Question 88:

  You are the Solutions Architect of a large company and are tasked with migrating all your services to Oracle Cloud Infrastructure. As part of this, you first design a Virtual Cloud Network (VCN) with a public subnet and a private subnet. Then in order to provide Internet connectivity to the instances in your private subnet, you create an Oracle Linux instance in your public subnet and configure NAT on it. However, even after adding all related security list rules and routes in the Route Table, your private subnet instances still cannot connect to the Internet. Which action should you perform to enable Internet connectivity?

  A. Disable "Source and Destination Check" on the VNIC of your Linux instance.
  B. There is no way that a private subnet can connect to the Internet.
  C. Create a Dynamic Routing Gateway (DRG) and route your private IP traffic to the DRG.
  D. Restart the NAT instance.
  A. Disable "Source and Destination Check" on the VNIC of your Linux instance.

  ---

  https://docs.cloud.oracle.com/iaas/Content/Network/Tasks/managingVNICs.htm#Source/D By default, every VNIC performs the source/destination check on its network traffic. The VNIC looks at the source and destination listed in the header

  of each network packet. If the VNIC is not the source or destination, then the packet is dropped.

  If the VNIC needs to forward traffic (for example, if it needs to perform Network Address Translation (NAT)), you must disable the source/destination check on the VNIC. For instructions, see To update an existing VNIC. For information about

  the general scenario, see Using a Private IP as a Route Target.

• Question 89:

  You have created a new compartment called Production to host some production apps. You have also created users in your tenancy and added them to a Group called "production group". Your users are still unable to access the Production compartment. How can you resolve this situation?

  A. Every compartment you create comes with a predefined set of policies, so no further action is needed
  B. Your users get automatic access to all compartments, so no further action is needed
  C. Write an IAM Policy for each specific user granting them access to the production compartment
  D. Write an IAM Policy for "production_group" granting it access to the production compartment
  D. Write an IAM Policy for "production_group" granting it access to the production compartment

  ---

  When creating a compartment, you must provide a name for it (maximum 100 characters, including letters, numbers, periods, hyphens, and underscores) that is unique within its parent compartment. You must also provide a description, which

  is a non-unique, changeable description for the compartment, from 1 through 400 characters.

  After creating a compartment, you need to write at least one policy for it, otherwise no one can access it (except administrators or users who have permissions set at the tenancy level). When creating a compartment inside another

  compartment, the compartment inherits access permissions from compartments higher up its hierarchy.

  When you create an access policy, you need to specify which compartment to attach it to. This controls who can later modify or delete the policy. Depending on how you've designed your compartment hierarchy, you might attach it to the

  tenancy, a parent, or to the specific compartment itself.

• Question 90:

  As a solution architect, you are showcasing the Oracle Cloud Infrastructure (OCI) Object Storage feature about Object Versioning to a customer. Which statement is true in regards to OCI Object Storage Versioning?

  A. Object versioning does not provide data protection against accidental or malicious object update, overwrite, or deletion.
  B. By default, object versioning is disabled on a bucket.
  C. A bucket that is versioning-enabled can have only and always will have a latest version of the object in the bucket.
  D. Objects are physically deleted from a bucket when versioning is enabled.
  A. Object versioning does not provide data protection against accidental or malicious object update, overwrite, or deletion.

  ---

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/usingversioning.htm