Oracle Oracle Cloud Solutions Infrastructure 1Z0-1072-22 Questions & Answers

• Question 41:

  You have provisioned an Autonomous Transaction Processing (ATP) database and logged into the ATP

  service console.

  What are three abilities that can be performed from this service console? (Choose three.)

  A. scale up/down the CPUs

  B. create ATP database users

  C. reset the admin password

  D. set resource management rules

  E. monitor database activity and SQL queries

  Correct Answer: CDE

  In ATP Service Console,

  In the activity screen allows you to perform some basic monitor database activity and SQL queries

  

  In the administration screen allows you to perform some basic administration of the service, like reset the admin password and set resource management rules

  

• Question 42:

  You have five different company locations spread across the US. For a proof-of-concept (POC) you need

  to setup secure and encrypted connectivity to your workloads running in a single virtual cloud network

  (VCN) in the Oracle Cloud Infrastructure Ashburn region from all company locations.

  What would meet this requirement?

  A. Create five internet gateways in your VCN and have separate route table for each internet gateway.

  B. Create five virtual circuits using FastConnect for each company location and terminate those connections on a single dynamic routing gateway (DRG). Attach that DRG to your VCN.

  C. Create five IPsec connections with each company location and terminate those connections on a single DRG. Attach that DRG to your VCN.

  D. Create five IPsec VPN connections with each company location and terminate those connections on five separate DRGs. Attach those DRGs to your VCN.

  Correct Answer: C

  Access to Your On-Premises Network There are two ways to connect your on-premises network to Oracle Cloud Infrastructure: VPN Connect: Offers multiple IPSec tunnels between your existing network's edge and your VCN, by way of a DRG that you create and attach to your VCN. Oracle Cloud Infrastructure FastConnect: Offers a private connection between your existing network's edge and Oracle Cloud Infrastructure. Traffic does not traverse the internet. Both private peering and public peering are supported. That means your on-premises hosts can access private IPv4 addresses in your VCN as well as regional public IPv4 addresses in Oracle Cloud Infrastructure (for example, Object Storage or public load balancers in your VCN). You can use one or both types of the preceding connections. If you use both, you can use them simultaneously, or in a redundant configuration. These connections come to your VCN by way of a single DRG that you create and attach to your VCN. Without that DRG attachment and a route rule for the DRG, traffic does not flow between your VCN and on-premises network. At any time, you can detach the DRG from your VCN but maintain all the remaining components that form the rest of the connection. You could then reattach the DRG again, or attach it to another VCN.

• Question 43:

  You must implement a backup solution for your Autonomous Data Warehouse (ADW) that will enable you

  to restore data as old as one year with a recovery point objective (RPO) of 10 days.

  Which database backup strategy would you select?

  A. Take weekly manual backups to supplement the automated backups and preserve them for 12 months.

  B. Use the automated backups.

  C. Take monthly manual backups to supplement the automated backups and preserve them for 12 months.

  D. Take quarterly manual backups to supplement the automated backups and preserve them for 12 months.

  Correct Answer: B

  Oracle Cloud Infrastructure automatically backs up your Autonomous Databases and retains these backups for 60 days. Automatic backups are weekly full backups and daily incremental backups. You can also create manual backups to supplement your automatic backups. Manual backups are stored in an Object Storage bucket that you create, and are retained for 60 days The retention period for manual backups is the same as automatic backups which is 60 days. So we cannot preserve the backup for 12 months https://docs.oracle.com/en/cloud/paas/autonomous-data-warehouse-cloud/user/backupmanual.html#GUID-D95E5D6A-C470-4A68-9545-CC99D937E7D1

• Question 44:

  You have successfully configured identity federation between Oracle Cloud Infrastructure (OCI) and Oracle Identity Cloud Services (IDCS). A new project manager wants access to OCI for her team and provides the name of an existing group within IDCS to use when granting access. How do you configure federation to allow the project team access to OCI resources?

  A. Create a new IAM group in OCI and map it to the existing IDCS group. Create a new policy in IDCS and reference the name of the IAM group.

  B. Create a new Identity and Access Management (IAM) policy in OCI and reference the name of the IDCS group in each policy statement.

  C. Create a new compartment in OCI with the same name as the existing IDCS group. Create an IAM policy that references the new compartment and the name of the IDCS group.

  D. Create a new IAM group in OCI and map it to the existing IDCS group. Create a new IAM policy and reference the name of the IAM group in each policy statement.

  Correct Answer: D

  When working with your IdP, your administrator defines groups and assigns each user to one or more groups according to the type of access the user needs. Oracle Cloud Infrastructure also uses the concept of groups (in conjunction with IAM policies) to define the type of access a user has. As part of setting up the relationship with the IdP, your administrator can map each IdP group to a similarly defined IAM group, so that your company can re-use the IdP group definitions when authorizing user access to Oracle Cloud Infrastructure resources. Here's a screenshot from the mapping process:

  

• Question 45:

  You are asked to create a user that will access programmatic endpoints in Oracle Cloud Infrastructure. The user must not be allowed to authenticate by username and password. Which two authentication options can you use? (Choose two.)

  A. PEM Certificate file

  B. Auth tokens

  C. API signing key

  D. Windows password

  E. SSH key pair

  Correct Answer: BC

• Question 46:

  Which two options are available when setting up DNS for your bare metal and virtual machine DB Systems? (Choose two.)

  A. Internet and custom resolver

  B. Google DNS servers

  C. custom resolver

  D. Internet and virtual cloud network (VCN) resolver

  Correct Answer: CD

• Question 47:

  You are designing a shared storage solution for your company in Oracle Cloud Infrastructure. The proposed storage solution should allow users to create a hierarchical structure (similar to the directory structure in Linux or Windows based systems). The solution should provide data encryption and a large amount of storage space. Which would be the best implementation strategy?

  A. Use block storage. Create and attach a large block storage volume to one compute instance. Assign a public IP to the compute instance. Store data on the block storage and access it by connecting to the compute instance.

  B. Use object storage. Create a single namespace and multiple buckets to create the hierarchical directory structure.

  C. Use object storage. Create multiple namespaces with one bucket each. Make the buckets publicly accessible.

  D. Use file storage service. Create a file system and a mount target. Share the private IP of the mount target.

  Correct Answer: D

• Question 48:

  Which two statements are true about data guard service on DB Systems in Oracle Cloud Infrastructure (OCI)? (Choose two.)

  A. Data guard implementation requires two DB Systems, one running the primary database on a virtual machine and the standby database running on bare metal

  B. Data guard configuration on the OCI is limited to one standby database per primary database

  C. Data guard configuration on the OCI is limited to a virtual machine only

  D. Data guard implementation requires two DB Systems, one containing the primary database and one containing the standby database

  Correct Answer: BD

• Question 49:

  Which two statements about fault domains are true? (Choose two.)

  A. A fault domain is a grouping of hardware and infrastructure within an availability domain

  B. Each availability domain contains three fault domains

  C. A failed instance in a fault domain is automatically relaunched

  D. A fault domain is selected automatically based on usage data

  Correct Answer: AB

  References: A fault domain is a grouping of hardware and infrastructure within an availability domain. Each availability domain contains three fault domains. Fault domains provide anti-affinity: they let you distribute your instances so that the instances are not on the same physical hardware within a single availability domain.

• Question 50:

  Which statement is true about Oracle Cloud Infrastructure (OCI) object storage support for server- side encryption?

  A. You must manually enable server-side encryption for each object as you upload to OCI object storage

  B. Objects are automatically encrypted as they are uploaded to object storage and decrypted upon retrieval

  C. You must manually decrypt the data when retrieving from OCI object storage

  D. Only the object data is encrypted and the user-defined metadata that is associated with the object is not encrypted

  Correct Answer: B

  References: https://www.oracle.com/cloud/storage/object-storage-faq.html

  -Oracle Object Storage supports server-side encryption. All data stored in Oracle Object Storage is automatically encrypted

  -Encryption is automatically enabled for all data with no action required on the part of customers.

  -Oracle encrypt both the object data and the user-defined metadata associated with the object.