Oracle 1Z0-1072-22 Online Practice Questions and Exam Preparation

Oracle 1Z0-1072-22 Online Questions & Answers

• Question 41:

  Which certificate format is used with the load balancer?

  A. PFX
  B. PEM
  C. PKCS12
  D. CRT
  B. PEM

  ---

  https://docs.cloud.oracle.com/iaas/Content/Balance/Tasks/managingcertificates.htm

• Question 42:

  When terminating a compute instance, you want to preserve the boot volume and its data. Which step will you need to perform?

  A. You cannot preserve the boot volume; it will always be deleted when you terminate the instance.
  B. Reboot the instance first, and then terminate the instance.
  C. Disable the default option to delete the boot volume when terminating an instance.
  D. Before terminating the instance, you must detach the boot volume.
  C. Disable the default option to delete the boot volume when terminating an instance.

  ---

  References:

  The dialog will show you when you terminate the instance. If you want to preserve the boot volume associated with the instance, uncheck Permanently delete the attached Boot Volume. https://docs.cloud.oracle.com/iaas/Content/Compute/

  Tasks/terminatinginstance.htm

• Question 43:

  Which statement is true about the Oracle Cloud Infrastructure File Storage Service Mount Target?

  A. You can access multiple file systems through a single mount target
  B. Mount target has a public IP address and DNS name
  C. Mount target lives in a single subnet of your choice, but is not highly available
  D. Each mount target requires six internal IP addresses in the subnet to function
  A. You can access multiple file systems through a single mount target

  ---

  A mount target is an NFS endpoint that lives in a VCN subnet of your choice and provides network access for file systems. The mount target provides the IP address or DNS name that is used together with a unique export path to mount the file system. A single mount target can export many file systems. Typically, you create your first mount target and export when you create your first file system. The mount target maintains an export set which contains all of the exports for its associated file systems. Limitations and Considerations

  Each availability domain is limited to two mount targets by default. However, you can export up to 100 file systems through each mount target.

  See Service Limits for a list of applicable limits and instructions for requesting a limit increase. Each mount target requires three internal IP addresses in the subnet to function. Two of the IP addresses are used during mount target creation.

  The third IP address must remain available for the mount target to use for high availability failover.

  The File Storage service doesn't "reserve" the third IP address required for high availability failover. Use care when designing your subnets and file systems to ensure that sufficient IP addresses remain available for your mount targets.

• Question 44:

  A company currently uses Microsoft Active Directory as its identity provider. The company recently purchased Oracle Cloud Infrastructure (OCI) to leverage the cloud platform for its test and development operations. As the administrator, you are now tasked with giving access only to developers so that they can start creating resources in their OCI accounts. Which step will you perform to achieve this requirement?

  A. Create a group for developers on OCI and map the group to a similar group in Microsoft Active Directory during the federation process.
  B. Federate all Microsoft Active Directory groups with OCI to allow users to use their existing credentials.
  C. Create a new user account for each user, and then create policies to provide access to developers.
  D. Create a group for developers on OCI, export all the developers from Microsoft Active Directory, and then import them into the Identity and Access Management (IAM) group.
  A. Create a group for developers on OCI and map the group to a similar group in Microsoft Active Directory during the federation process.

• Question 45:

  Which two statements are true about policies?

  A. You can use read, write, manage, and inspect as verbs for defining a policy.
  B. A policy is a document that specifies who can access which Oracle Cloud Infrastructure resources that your company has, and how.
  C. Users need not do anything but still have to be added to a group with appropriate policies defined.
  D. You can deny access to a group via policies.
  B. A policy is a document that specifies who can access which Oracle Cloud Infrastructure resources that your company has, and how.
  C. Users need not do anything but still have to be added to a group with appropriate policies defined.

• Question 46:

  Which two statements are true about subnets within a VCN? (Choose two.)

  A. You can have multiple subnets in an Availability Domain for a given VCN.
  B. Private and Public subnets cannot reside in the same Availability Domain for a given VCN.
  C. Subnets can have their IP addresses overlap with other subnets in another network for a given VCN.
  D. Instances obtain their private IP and the associated security list from their subnets.
  A. You can have multiple subnets in an Availability Domain for a given VCN.
  D. Instances obtain their private IP and the associated security list from their subnets.

  ---

  References: https://cloud.oracle.com/en_US/bare-metal-network/vcn/faq

• Question 47:

  Which two statements are true about Oracle Cloud Infrastructure (OCI) DB Systems Data Guard service?

  A. Both DB systems must use the same VCN, and port 1521 must be open
  B. Data guard configuration on the OCI is limited to a virtual machine only
  C. Data guard implementation for Bare Metal shapes requires two DB Systems, one containing the primary database and one containing the standby database.
  D. Data guard implementation requires two DB Systems, one running the primary database on a virtual machine and the standby database running on bare metal.
  A. Both DB systems must use the same VCN, and port 1521 must be open
  C. Data guard implementation for Bare Metal shapes requires two DB Systems, one containing the primary database and one containing the standby database.

  ---

  An Oracle Data Guard implementation requires two DB systems, one containing the primary database and one containing the standby database. When you enable Oracle Data Guard for a virtual machine DB system database, a new DB

  system with the standby database is created and associated with the primary database. For a bare metal DB system, the DB system with the database that you want to use as the standby must already exist before you enable Oracle Data

  Guard.

  Requirement details are as follows:

  -Both DB systems must be in the same compartment.

  -

  The DB systems must be the same shape type (for example, if the shape of the primary database is a virtual machine, then the shape of the standby database can be any other virtual machine shape).

  -

  If your primary and standby databases are in different regions, then you must peer the virtual cloud networks (VCNs) for each database.

  -

  Configure the security list ingress and egress rules for the subnets of both DB systems in the Oracle Data Guard association to enable TCP traffic to move between the applicable ports. Ensure that the rules you create are stateful (the default).

• Question 48:

  Which statement is true about Oracle Cloud Identifiers (OCID)?

  A. mytenancy.oc.ocid is a valid OCID.
  B. If you delete a user, and them create a new user with the same name, the user will be considered a different user because of different OCIDs.
  C. Users can customize OCIDs for all the resources in their compartments.
  D. If you delete a user, and then create a new user with the same name, the new user will be assigned the exact same OCIDs as the system remembers.
  B. If you delete a user, and them create a new user with the same name, the user will be considered a different user because of different OCIDs.

  ---

  References:

• Question 49:

  You have five different company locations spread across the US. For a proof-of-concept (POC) you need to setup secure and encrypted connectivity to your workloads running in a single virtual cloud network (VCN) in the Oracle Cloud

  Infrastructure Ashburn region from all company locations.

  What would meet this requirement?

  A. Create five internet gateways in your VCN and have separate route table for each internet gateway.
  B. Create five virtual circuits using FastConnect for each company location and terminate those connections on a single dynamic routing gateway (DRG). Attach that DRG to your VCN.
  C. Create five IPsec connections with each company location and terminate those connections on a single DRG. Attach that DRG to your VCN.
  D. Create five IPsec VPN connections with each company location and terminate those connections on five separate DRGs. Attach those DRGs to your VCN.
  C. Create five IPsec connections with each company location and terminate those connections on a single DRG. Attach that DRG to your VCN.

  ---

  Access to Your On-Premises Network

  There are two ways to connect your on-premises network to Oracle Cloud Infrastructure:

  VPN Connect: Offers multiple IPSec tunnels between your existing network's edge and your VCN, by way of a DRG that you create and attach to your VCN.

  Oracle Cloud Infrastructure FastConnect: Offers a private connection between your existing network's edge and Oracle Cloud Infrastructure. Traffic does not traverse the internet. Both private peering and public peering are supported. That

  means your on-premises hosts can access private IPv4 addresses in your VCN as well as regional public IPv4 addresses in Oracle Cloud Infrastructure (for example, Object Storage or public load balancers in your VCN).

  You can use one or both types of the preceding connections. If you use both, you can use them simultaneously, or in a redundant configuration. These connections come to your VCN by way of a single DRG that you create and attach to your

  VCN. Without that DRG attachment and a route rule for the DRG, traffic does not flow between your VCN and on-premises network. At any time, you can detach the DRG from your VCN but maintain all the remaining components that form

  the rest of the connection. You could then reattach the DRG again, or attach it to another VCN.

• Question 50:

  Which statement is true about Oracle Cloud Infrastructure FastConnect?

  A. For private peering, FastConnect extends your existing infrastructure to allow you to consume object storage from your on-premises data center
  B. For private peering, FastConnect extends your existing infrastructure to a virtual cloud network
  C. The FastConnect provider network offers only 1 Gbps port connection speed increments
  D. For public peering, a dynamic routing gateway must be configured and attached to the virtual cloud network (VCN)
  B. For private peering, FastConnect extends your existing infrastructure to a virtual cloud network

  ---

  With FastConnect, you can choose to use private peering, public peering, or both. Private peering: To extend your existing infrastructure into a virtual cloud network (VCN) in Oracle Cloud Infrastructure (for example, to implement a hybrid cloud, or a lift and shift scenario). Communication across the connection is with IPv4 private addresses (typically RFC 1918). Public peering: To access public services in Oracle Cloud Infrastructure without using the internet. For example, Object Storage, the Oracle Cloud Infrastructure Console and APIs, or public load balancers in your VCN. Communication across the connection is with IPv4 public IP addresses. Without FastConnect, the traffic destined for public IP addresses would be routed over the internet.