Oracle 1Z0-1072-22 Online Practice Questions and Exam Preparation

Oracle 1Z0-1072-22 Online Questions & Answers

• Question 131:

  Which two statements are true about the Oracle Cloud Infrastructure Object Storage Service? (Choose two.)

  A. It provides higher IOPS than Block Storage.
  B. It can be directly attached or detached from a compute instance.
  C. Data is stored redundantly only in a single AD.
  D. Data is stored redundantly across multiple availability domains (ADs) in a multi-AD region.
  E. It provides strong consistency.
  D. Data is stored redundantly across multiple availability domains (ADs) in a multi-AD region.
  E. It provides strong consistency.

  ---

  STRONG CONSISTENCY When a read request is made, Object Storage always serves the most recent copy of the data that was written to the system. DURABILITY Object Storage is a regional service. Data is stored redundantly across multiple storage servers. Object Storage actively monitors data integrity using checksums and automatically detects and repairs corrupt data. Object Storage actively monitors and ensures data redundancy. If a redundancy loss is detected, Object Storage automatically creates more data copies. For more details about Object Storage durability, see the Oracle Cloud Infrastructure Object Storage FAQ. CUSTOM METADATA

  You can define your own extensive metadata as key-value pairs for any purpose. For example, you can create descriptive tags for objects, retrieve those tags, and sort through the data. You can assign custom metadata to objects and buckets using the Oracle Cloud Infrastructure CLI or SDK. See Software Development Kits and Command Line Interface for details. ENCRYPTION Object Storage employs 256-bit Advanced Encryption Standard (AES-256) to encrypt object data on the server. Each object is encrypted with its own key. Data encryption keys are encrypted with a master encryption key that is frequently rotated. Encryption is enabled by default and cannot be turned off.

• Question 132:

  Which two are required to create an IPSec VPN connection? (Choose two.)

  A. security list
  B. static route CIDR
  C. name
  D. compute instance
  A. security list
  B. static route CIDR

• Question 133:

  You created a public subnet and an internet gateway in your virtual cloud network (VCN) of Oracle Cloud Infrastructure. The public subnet has an associated route table and security list. However, after creating several compute instances in the public subnet, none can reach the Internet. Which two are possible reasons for the connectivity issue? (Choose two.)

  A. The route table has no default route for routing traffic to the internet gateway.
  B. There is no stateful egress rule in the security list associated with the public subnet.
  C. There is no dynamic routing gateway (DRG) associated with the VCN.
  D. There is no stateful ingress rule in the security list associated with the public subnet.
  E. A NAT gateway is needed to enable the communication flow to internet.
  A. The route table has no default route for routing traffic to the internet gateway.
  B. There is no stateful egress rule in the security list associated with the public subnet.

  ---

  An internet gateway as an optional virtual router that connects the edge of the VCN with the internet. To use the gateway, the hosts on both ends of the connection must have public IP addresses for routing. Connections that originate in your VCN and are destined for a public IP address (either inside or outside the VCN) go through the internet gateway. Connections that originate outside the VCN and are destined for a public IP address inside the VCN go through the internet gateway. Working with Internet Gateways You create an internet gateway in the context of a specific VCN. In other words, the internet gateway is automatically attached to a VCN. However, you can disable and re-enable the internet gateway at any time. Compare this with a dynamic routing gateway (DRG), which you create as a standalone object that you then attach to a particular VCN. DRGs use a different model because they're intended to be modular building blocks for privately connecting VCNs to your on-premises network. For traffic to flow between a subnet and an internet gateway, you must create a route rule accordingly in the subnet's route table (for example, destination CIDR = 0.0.0.0/0 and target = internet gateway). If the internet gateway is disabled, that means no traffic will flow to or from the internet even if there's a route rule that enables that traffic. For more information, see Route Tables. For the purposes of access control, you must specify the compartment where you want the internet gateway to reside. If you're not sure which compartment to use, put the internet gateway in the same compartment as the cloud network. For more information, see Access Control. You may optionally assign a friendly name to the internet gateway. It doesn't have to be unique, and you can change it later. Oracle automatically assigns the internet gateway a unique identifier called an Oracle Cloud ID (OCID). For more information, see Resource Identifiers. To delete an internet gateway, it does not have to be disabled, but there must not be a route table that lists it as a target. AS per compute instances can connect to the Internet so you use egress no ingress

• Question 134:

  You are a network architect of an application running on Oracle Cloud Infrastructure (OCI). Your security team has informed you about a security patch that needs to be applied immediately to one of the backend web servers. What should you do to ensure that the OCI load balancer does not forward traffic to this backend server during maintenance?

  A. Drain all existing connections to this backend server and mark the backend web server offline
  B. Create another OCI load balancer for the backend web servers, which are active and handling traffic
  C. Edit the security list associated with the subnet to avoid traffic connectivity to this backend serve
  D. Stop the load balancer for maintenance and restart the load balancer after the maintenance is finished
  A. Drain all existing connections to this backend server and mark the backend web server offline

  ---

  A load balancer improves resource utilization, facilitates scaling, and helps ensure high availability. You can configure multiple load balancing policies and application-specific health checks to ensure that the load balancer directs traffic only to healthy instances. The load balancer can reduce your maintenance window by draining traffic from an unhealthy application server before you remove it from service for maintenance. The Load Balancing service considers a server marked drain available for existing persisted sessions. New requests that are not part of an existing persisted session are not sent to that server. Edit Drain State: Opens a dialog box in which you can change the drain state. If you set the server's drain status to true, the load balancer stops forwarding new TCP connections and new non-sticky HTTP requests to this backend server. This setting allows an administrator to take the server out of rotation for maintenance purposes.

  e. Edit Offline State: Opens a dialog box in which you can change the offline status.

  If you set the server's offline status to true, the load balance forwards no ingress traffic to this backend server.

• Question 135:

  Which two are required parameters to create a public load balancer instance? (Choose two.)

  A. certificate
  B. load balancer name
  C. listener
  D. back end set
  E. two public subnets
  C. listener
  D. back end set

  ---

  References: https://docs.cloud.oracle.com/en-us/iaas/Content/GSG/Tasks/loadbalancing.htm

• Question 136:

  You have provisioned an Autonomous Transaction Processing (ATP) database and logged into the ATP service console. What are three abilities that can be performed from this service console? (Choose three.)

  A. scale up/down the CPUs
  B. create ATP database users
  C. reset the admin password
  D. set resource management rules
  E. monitor database activity and SQL queries
  C. reset the admin password
  D. set resource management rules
  E. monitor database activity and SQL queries

  ---

  In ATP Service Console,

  In the activity screen allows you to perform some basic monitor database activity and SQL queries

  

  In the administration screen allows you to perform some basic administration of the service, like reset the admin password and set resource management rules

  

• Question 137:

  You currently manage an e-commerce application that utilizes 25 identical compute resources to handle customer traffic. The stakeholders have asked you to create another 25 identical compute resources in order to deploy and test a new version of the software? What is the most efficient process to create 25 additional compute resources that are identical to the first 25?

  A. Create a custom image from 1 of the 25 servers. Use this custom image to provision 25 more servers
  B. Create a manual backup of each boot volume belonging to the 25 servers. Restore each backup to create 25 new boot volumes, from which you will provision 25 more servers
  C. Provision a new server and configure it to be identical to the first 25. Create a custom image from the new server, then use the custom image to provision 24 more servers
  D. Clone the boot volume of 1 of the 25 servers. Use the boot volume clone to provision 25 more servers
  A. Create a custom image from 1 of the 25 servers. Use this custom image to provision 25 more servers

• Question 138:

  What is a valid option when exporting a custom image?

  A. object storage URL
  B. archive storage URL
  C. file storage service
  D. block volume
  A. object storage URL

  ---

  You can use the Console or API to export images, and the exported images are stored in the Oracle Cloud Infrastructure Object Storage service. To perform an image export, you need write access to the Object Storage bucket for the image.

• Question 139:

  You deployed a web server in Oracle Cloud Infrastructure using an ephemeral public IP. After a few changes in your web server configuration, you rebooted the server and a new public IP was associated to your instance. What should you do to prevent this from happening again?

  A. Create a reserved public IP and associate it with the security list that your complete instance is using
  B. Create a reserved public IP and associate it with the subnet of your compute instance
  C. Create a reserved public IP and associate it with the VNIC of your compute instance
  D. Create a reserved public IP and associate it with the hosts file of your web server
  C. Create a reserved public IP and associate it with the VNIC of your compute instance

  ---

  A public IP address is an IPv4 address that is reachable from the internet. If a resource in your tenancy needs to be directly reachable from the internet, it must have a public IP address. Depending on the type of resource, there might be other

  requirements.

  There are two types of public IPs:

  Ephemeral: Think of it as temporary and existing for the lifetime of the instance. Reserved: Think of it as persistent and existing beyond the lifetime of the instance it's assigned to. You can unassign it and then reassign it to another instance

  whenever you like. Exception: reserved public IPs on public load balancers.

  To create a new reserved public IP in your pool

  Confirm you're viewing the region and compartment where you want to create the reserved public IP.

  Open the navigation menu. Under Core Infrastructure, go to Networking and click Public IPs.

  Click Create Reserved Public IP.

  Enter the following:

  Name: An optional friendly name for the reserved public IP. The name doesn't have to be unique, and you can change it later. Avoid entering confidential information.

  Compartment: Leave as is.

  Tags:Optionally, you can apply tags. If you have permissions to create a resource, you also have permissions to apply free-form tags to that resource. To apply a defined tag, you must have permissions to use the tag namespace. For more

  information about tagging, see Resource Tags. If you are not sure if you should apply tags, skip this option (you can apply tags later) or ask your administrator.

  Click Create Reserved Public IP.

  To assign a reserved public IP to a private IP

  Prerequisite: The private IP must not have an ephemeral or reserved public IP already assigned to it. If it does, first delete the ephemeral public IP, or unassign the reserved public IP. Confirm you're viewing the compartment that contains the

  instance with the private IP you're interested in.

  Open the navigation menu. Under Core Infrastructure, go to Compute and click Instances.

  Click the instance to view its details.

  Under Resources, click Attached VNICs.

  The primary VNIC and any secondary VNICs attached to the instance are displayed.

  Click the VNIC you're interested in.

  Under Resources, click IP Addresses.

  The VNIC's primary private IP and any secondary private IPs are displayed. For the private IP you're interested in, click the Actions icon (three dots), and then click Edit. In the Public IP Address section, for Public IP Type, select the radio

  button for Reserved Public IP.

  Enter the following:

  Compartment: The compartment that contains the reserved public IP you want to assign. Reserved Public IP: The reserved public IP you want to assign. You have three choices:

  Create a new reserved public IP. You may optionally provide a friendly name for it. The name doesn't have to be unique, and you can change it later. Avoid entering confidential information. Assign a reserved public IP that is currently

  unassigned.

  Move a reserved public IP from another private IP.

  Click Update.

• Question 140:

  Your customer is using an Oracle Cloud Infrastructure (OCI) compartment named Production that hosts

  several resources such as compute instances, DB Systems and File Systems. Each resource in the Production compartment is tagged.

  The customer's security team wants to restrict access to DB Systems to only the authorized group of DBAs.

  Which OCI Tagging capability can be used to meet this requirement?

  A. Tags Defaults with predefined values
  B. Tag Defaults
  C. Cost-Tracking Tags
  D. Tag-based Access Control
  D. Tag-based Access Control

  ---

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/Tagging/Tasks/ managingaccesswithtags.htm#about