Oracle 1Z0-1072-22 Online Practice Questions and Exam Preparation

Oracle 1Z0-1072-22 Online Questions & Answers

• Question 201:

  You have created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains a DB System. The application requires a shared file system so you have provisioned one using the file storage service (FSS). You also created the corresponding mount target in one of the application subnets. The VCN security lists are properly configured so that both application servers and the DB System can access the file system. The security team determines that the DB System should have read-only access to the file system. What change would you make to satisfy this requirement?

  A. Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet.
  B. Connect via SSH to one of the application servers where the file system has been mounted. Use the Unix command chmod to change permissions on the file system directory, allowing the database user read only access.
  C. Modify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateless.
  D. Create an instance principal for the DB System. Write an Identity and Access Management (IAM) policy that allows the instance principal read-only access to the file storage service.
  A. Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet.

  ---

  NFS export options enable you to create more granular access control than is possible using just security list rules to limit VCN access. You can use NFS export options to specify access levels for IP addresses or CIDR blocks connecting to file systems through exports in a mount target.

• Question 202:

  Which three methods can you use to manage Oracle Cloud Infrastructure services? (Choose three.)

  A. Oracle Cloud Infrastructure Desktop Client
  B. Oracle Cloud Infrastructure Console
  C. SSH or RDP
  D. Command-line Interface
  E. REST API
  B. Oracle Cloud Infrastructure Console
  D. Command-line Interface
  E. REST API

  ---

  https://docs.cloud.oracle.com/iaas/Content/GSG/Concepts/baremetalintro.htm

• Question 203:

  Which two resources are availability domain constructs? (Choose two.)

  A. VCN
  B. Groups
  C. Block Volume
  D. Compute Instance
  E. Object Storage
  C. Block Volume
  D. Compute Instance

  ---

  References: https://docs.cloud.oracle.com/iaas/Content/General/Concepts/regions.htm#one

• Question 204:

  What is the default backup location for database backup on Database Cloud Service (DBCS)?

  A. Object Storage on Oracle Cloud Infrastructure
  B. ASM diskgroup
  C. block volume
  D. locally attached NVMe on Virtual Machine
  A. Object Storage on Oracle Cloud Infrastructure

  ---

  References: https://docs.oracle.com/en/cloud/paas/database-dbaas-cloud/csdbi/backing.html

• Question 205:

  Which of the following statement is true regarding Oracle Cloud Infrastructure Object Storage Pre- Authenticated Requests?

  A. It Is not possible to create pre-authenticated requests for "archive" storage tier
  B. Changing the bucket visibility does not change existing pre-authenticated requests
  C. It is not possible to create pre-authenticated requests for the buckets, but only for the objects
  D. Pre-authenticated requests don't have an expiration
  B. Changing the bucket visibility does not change existing pre-authenticated requests

  ---

  Pre-authenticated requests provide a way to let users access a bucket or an object without having their own credentials, as long as the request creator has permissions to access those objects. For example, you can create a request that lets

  an operations support user upload backups to a bucket without owning API keys. Or, you can create a request that lets a business partner update shared data in a bucket without owning API keys.

  When you create a pre-authenticated request, a unique URL is generated. Anyone you provide this URL to can access the Object Storage resources identified in the pre-authenticated request, using standard HTTP tools like curl and wget.

  Understand the following scope and constraints regarding pre-authenticated requests:

  Users can't list bucket contents.

  You can create an unlimited number of pre-authenticated requests. There is no time limit to the expiration date that you can set. You can't edit a pre-authenticated request. If you want to change user access options in response to changing

  requirements, you must create a new pre-authenticated request. The target and actions for a pre-authenticated request are based on the creator's permissions. The request is not, however, bound to the creator's account login credentials. If

  the creator's login credentials change, a pre-authenticated request is not affected. You cannot delete a bucket that has a pre-authenticated request associated with that bucket or with an object in that bucket.

  Understand the following scope and constraints regarding public access:

  Changing the type of access is bi-directional. You can change a bucket's access from public to private or from private to public.

  Changing the type of access doesn't affect existing pre-authenticated requests. Existing pre- authenticated requests still work.

• Question 206:

  Why are two subnets required to create a public load balancer when additional subnets are often used for back-end servers? (Choose two.)

  A. Routing is simpler when the load balancer is not in the same subnet as the back-end server.
  B. Performance is higher when more subnets are used.
  C. Additional subnets for back-end servers allow for separate route tables for these servers.
  D. Additional subnets for back-end servers allow for separate security lists for these servers.
  B. Performance is higher when more subnets are used.
  D. Additional subnets for back-end servers allow for separate security lists for these servers.

  ---

  References:

  http://www.oracle.com/webfolder/technetwork/tutorials/obe/cloud/ocis/load-balancer/load- balancer.html

• Question 207:

  A financial firm is designing an application architecture for its online trading platform that must have high availability and fault tolerance.

  Their solutions architect configured the application to use an Oracle Cloud Infrastructure Object Storage bucket located in the US West (us-phoenix-1) region to store large amounts of financial data. The stored financial data in the bucket must

  not be affected even if there is an outage in one of the Availability Domains or a complete region.

  What should the architect do to avoid any costly

  A. Create a new Object Storage bucket in another region and configure lifecycle policy to move data every 5 days.
  B. Create a lifecycle policy to regularly send data from Standard to Archive storage.
  C. Copy the Object Storage bucket to a block volume.
  D. Create a replication policy to send data to a different bucket in another OCI region.
  A. Create a new Object Storage bucket in another region and configure lifecycle policy to move data every 5 days.

• Question 208:

  You have an application server running in a public subnet on a compute instance in US West (us- phoenix-1) region of Oracle Cloud Infrastructure (OCI). The data sitting on this instance needs to be copied to OCI Object storage bucket

  available in the same region without traversing over the internet. To enable the connectivity between the instance and Object Storage, you created a service gateway with service CIDR of all Object Storage in us-phoenix-1 enabled. You also

  modified the security rules to allow the desired traffic.

  However, when you tried sending the data to the Object Storage bucket, you notice that the data is going over the internet and not via the service gateway.

  What could be the possible reason for this behavior?

  A. The route table associated with the subnet has no route rule where the destination is object storage service
  B. The service gateway created in the VCN resides in a different availability domain
  C. The security list associated with the subnet has an egress rule that allows all traffic to be forwarded to a destination CIDR 0.0.0.0/0
  D. Identity and Access Management (IAM) policies restrict the access to the object storage bucket
  A. The route table associated with the subnet has no route rule where the destination is object storage service

• Question 209:

  Which two are true for achieving High Availability on Oracle Cloud Infrastructure? (Choose two.)

  A. Store your database across multiple regions so that half of the data resides in one region and the other half resides in another region.
  B. Attach your block volume form Availability Domain 1 to a compute instance in Availability Domain 2 (and vice versa) so that they are highly available.
  C. Configure your database to have Data Guard in another Availability Domain in Sync mode within a region.
  D. Store your database files on Object Storage so that they are available in all Availability Domains in all regions.
  E. Distribute your application servers across all Availability Domains within a region.
  C. Configure your database to have Data Guard in another Availability Domain in Sync mode within a region.
  E. Distribute your application servers across all Availability Domains within a region.

• Question 210:

  You have an instance running in a development compartment that needs to make API calls against other OCI services, but you do not want to configure user credentials or a store a configuration file on the instance. How can you meet this requirement?

  A. Create a dynamic group with matching rules to include your instance
  B. Instances can automatically make calls to other OCI services
  C. Instances are secure and cannot make calls to other OCI services
  D. Create a dynamic group with matching rules to include your instance and write a policy for this dynamic group
  D. Create a dynamic group with matching rules to include your instance and write a policy for this dynamic group

  ---

  Dynamic groups allow you to group Oracle Cloud Infrastructure computer instances as "principal" actors (similar to user groups). When you create a dynamic group, rather than adding members explicitly to the group, you instead define a set of matching rules to define the group members. For example, a rule could specify that all instances in a particular compartment are members of the dynamic group. The members can change dynamically as instances are launched and terminated in that compartment. A dynamic group has no permissions until you write at least one policy that gives that dynamic group permission to either the tenancy or a compartment. When writing the policy, you can specify the dynamic group by using either the unique name or the dynamic group's OCID. Per the preceding note, even if you specify the dynamic group name in the policy, IAM internally uses the OCID to determine the dynamic group.