Oracle 1Z0-1072 Online Practice Questions and Exam Preparation

Oracle 1Z0-1072 Online Questions & Answers

• Question 111:

  You deployed a web server in Oracle Cloud Infrastructure using an ephemeral public IP. After a few changes in your web server configuration, you rebooted the server and a new public IP was associated to your instance. What should you do to prevent this from happening again?

  A. Create a reserved public IP and associate it with the security list that your complete instance is using
  B. Create a reserved public IP and associate it with the subnet of your compute instance
  C. Create a reserved public IP and associate it with the VNIC of your compute instance
  D. Create a reserved public IP and associate it with the hosts file of your web server
  C. Create a reserved public IP and associate it with the VNIC of your compute instance

  ---

  A public IP address is an IPv4 address that is reachable from the internet. If a resource in your tenancy needs to be directly reachable from the internet, it must have a public IP address. Depending on the type of resource, there might be

  other requirements.

  There are two types of public IPs:

  Ephemeral: Think of it as temporary and existing for the lifetime of the instance.

  Reserved: Think of it as persistent and existing beyond the lifetime of the instance it's assigned to. You can unassign it and then reassign it to another instance whenever you like. Exception: reserved public IPs on public load balancers.

  To create a new reserved public IP in your pool

  Confirm you're viewing the region and compartment where you want to create the reserved public IP.

  Open the navigation menu. Under Core Infrastructure, go to Networking and click Public IPs.

  Click Create Reserved Public IP.

  Enter the following:

  Name: An optional friendly name for the reserved public IP. The name doesn't have to be unique, and you can change it later. Avoid entering confidential information.

  Compartment: Leave as is.

  Tags:Optionally, you can apply tags. If you have permissions to create a resource, you also have permissions to apply free-form tags to that resource. To apply a defined tag, you must have permissions to use the tag namespace. For more

  information about tagging, see Resource Tags. If you are not sure if you should apply tags, skip this option (you can apply tags later) or ask your administrator.

  Click Create Reserved Public IP.

  To assign a reserved public IP to a private IP

  Prerequisite: The private IP must not have an ephemeral or reserved public IP already assigned to it. If it does, first delete the ephemeral public IP, or unassign the reserved public IP.

  Confirm you're viewing the compartment that contains the instance with the private IP you're interested in.

  Open the navigation menu. Under Core Infrastructure, go to Compute and click Instances.

  Click the instance to view its details.

  Under Resources, click Attached VNICs.

  The primary VNIC and any secondary VNICs attached to the instance are displayed.

  Click the VNIC you're interested in.

  Under Resources, click IP Addresses.

  The VNIC's primary private IP and any secondary private IPs are displayed.

  For the private IP you're interested in, click the Actions icon (three dots), and then click Edit.

  In the Public IP Address section, for Public IP Type, select the radio button for Reserved Public IP.

  Enter the following:

  Compartment: The compartment that contains the reserved public IP you want to assign.

  Reserved Public IP: The reserved public IP you want to assign. You have three choices:

  Create a new reserved public IP. You may optionally provide a friendly name for it. The name doesn't have to be unique, and you can change it later. Avoid entering confidential information.

  Assign a reserved public IP that is currently unassigned.

  Move a reserved public IP from another private IP.

  Click Update.

• Question 112:

  A company currently uses Microsoft Active Directory as its identity provider. The company recently subscribed to Oracle Cloud Infrastructure (OCI) to leverage the cloud platform for test and development. As the administrator, you configured the OCI tenancy to be federated with Microsoft Active Directory. Now you need to give access to developers so that they can start creating resources in their OCI accounts.

  Which step will you perform to make sure you are not duplicating user creation inside of OCI tenancy?

  A. Create a group for developers on OCI and map the group to a similar group in Microsoft Active Directory during the federation process.
  B. Create a new user account in OCI for each user, and then create policies to provide access to developers.
  C. Create a group for developers on OCI, export all the developers from Microsoft Active Directory, and then import them into the Identity and Access Management (IAM) group.
  D. Create a single user account in OCI, and then create policies to provide access to developers to this single account.
  A. Create a group for developers on OCI and map the group to a similar group in Microsoft Active Directory during the federation process.

  ---

  When working with your IdP, your administrator defines groups and assigns each user to one or more groups according to the type of access the user needs. Oracle Cloud Infrastructure also uses the concept of groups (in conjunction with IAM policies) to define the type of access a user has. As part of setting up the relationship with the IdP, your administrator can map each IdP group to a similarly defined IAM group, so that your company can re-use the IdP group definitions when authorizing user access to Oracle Cloud Infrastructure resources.

• Question 113:

  Which five are the required parameters to launch an instance in Oracle Cloud Infrastructure? (Choose five.)

  A. subnet
  B. Availability Domain
  C. Virtual Cloud Network
  D. host name
  E. instance shape
  F. image operating system
  G. private IP address
  A. subnet
  B. Availability Domain
  C. Virtual Cloud Network
  E. instance shape
  F. image operating system

  ---

  References: https://docs.cloud.oracle.com/iaas/Content/Compute/Concepts/computeoverview.htm

• Question 114:

  Which statement is true about Data Guard Implementation in DB systems?

  A. Both DB systems must be in the same compartment, and they must be the same shape
  B. You can define the backup window and set custom backup retention period for the automatic database backup schedule.
  C. You cannot manage Oracle database initialization parameters at a global level.
  D. You cannot manage the database as sys/sysdba.
  A. Both DB systems must be in the same compartment, and they must be the same shape

  ---

  An Oracle Data Guard implementation requires two DB systems, one containing the primary database and one containing the standby database. When you enable Oracle Data Guard for a virtual machine DB system database, a new DB

  system with the standby database is created and associated with the primary database. For a bare metal DB system, the DB system with the database that you want to use as the standby must already exist before you enable Oracle Data

  Guard.

  Requirement details are as follows:

  -Both DB systems must be in the same compartment.

  -

  The DB systems must be the same shape type (for example, if the shape of the primary database is a virtual machine, then the shape of the standby database can be any other virtual machine shape).

  -

  If your primary and standby databases are in different regions, then you must peer the virtual cloud networks (VCNs) for each database. See Remote VCN Peering (Across Regions).

  -

  Configure the security list ingress and egress rules for the subnets of both DB systems in the Oracle Data Guard association to enable TCP traffic to move between the applicable ports. Ensure that the rules you create are stateful (the default).

• Question 115:

  Which storage would you use if your big data workload requires shared access and an NFS based interface?

  A. File Storage
  B. Storage Software Cloud Appliance
  C. Object Storage
  D. Archive Storage
  E. Block Volume
  A. File Storage

  ---

  References: https://docs.cloud.oracle.com/iaas/Content/File/Concepts/filestorageoverview.htm

  The File Storage service is designed to meet the needs of applications and users that need an enterprise file system across a wide range of use cases, including the following:

  General Purpose File Storage: Access to an unlimited pool of file systems to manage growth of structured and unstructured data.

  Big Data and Analytics: Run analytic workloads and use shared file systems to store persistent data.

  Lift and Shift of Enterprise Applications: Migrate existing Oracle applications that need NFS storage, such as Oracle E-Business Suite and PeopleSoft.

  Databases and Transactional Applications: Run test and development workloads with Oracle, MySQL, or other databases.

  Backups, Business Continuity, and Disaster Recovery: Host a secondary copy of relevant file systems from on premises to the cloud for backup and disaster recovery purposes.

  MicroServices and Docker: Deliver stateful persistence for containers. Easily scale as your container-based environments grow.

• Question 116:

  Which statement is true about restoring a block volume from a manual or policy-based block volume backup?

  A. It can be restored as new volumes to any Availability Domain within the same region.
  B. It must be restored as new volumes to the same Availability Domain on which the original block volume backup resides.
  C. It can be restored as new volumes to any Availability Domain across different regions.
  D. It can be restored as new volumes with different sizes from the backups.
  A. It can be restored as new volumes to any Availability Domain within the same region.

• Question 117:

  When terminating a compute instance, you want to preserve the boot volume and its data. Which step will you need to perform?

  A. You cannot preserve the boot volume; it will always be deleted when you terminate the instance.
  B. Reboot the instance first, and then terminate the instance.
  C. Disable the default option to delete the boot volume when terminating an instance.
  D. Before terminating the instance, you must detach the boot volume.
  C. Disable the default option to delete the boot volume when terminating an instance.

  ---

  References: The dialog will show you when you terminate the instance. If you want to preserve the boot volume associated with the instance, uncheck Permanently delete the attached Boot Volume. https://docs.cloud.oracle.com/iaas/Content/Compute/Tasks/terminatinginstance.htm

• Question 118:

  You are designing a two-tier web application in Oracle Cloud Infrastructure (OCI). Your clients want to access the web servers from anywhere, but want to prevent access to the database servers from the Internet. Which is the recommended way to design the network architecture?

  A. Create public subnets for web servers and private subnets for database servers in your virtual cloud network (VCN), and associate separate internet gateways for each subnet.
  B. Create public subnets for web servers and associate a dynamic routing gateway with that subnet, and a private subnet for database servers with no association to dynamic gateway.
  C. Create public subnets for web servers and private subnets for database servers in your VCN, and associate separate security lists and route tables for each subnet.
  D. Create a single public subnet for your web servers and database servers, and associate only your web servers to internet gateway.
  C. Create public subnets for web servers and private subnets for database servers in your VCN, and associate separate security lists and route tables for each subnet.

  ---

  When you create a subnet, by default it's considered public, which means instances in that subnet are allowed to have public IP addresses. Whoever launches the instance chooses whether it will have a public IP address. You can override that behavior when creating the subnet and request that it be private, which means instances launched in the subnet are prohibited from having public IP addresses. Network administrators can therefore ensure that instances in the subnet have no internet access, even if the VCN has a working internet gateway, and security rules and firewall rules allow the traffic.

  There are two optional gateways (virtual routers) that you can add to your VCN depending on the type of internet access you need:

  Internet gateway: For resources with public IP addresses that need to be reached from the internet (example: a web server) or need to initiate connections to the internet.

  NAT gateway: For resources without public IP addresses that need to initiate connections to the internet (example: for software updates) but need to be protected from inbound connections from the internet.

  Just having an internet gateway alone does not expose the instances in the VCN's subnets directly to the internet. The following requirements must also be met:

  The internet gateway must be enabled (by default, the internet gateway is enabled upon creation).

  The subnet must be public.

  The subnet must have a route rule that directs traffic to the internet gateway.

  The subnet must have security list rules that allow the traffic (and each instance's firewall must allow the traffic).

  The instance must have a public IP address.

• Question 119:

  Which three types of credentials are used to manage Oracle Cloud Infrastructure Identity and Access Management (IAM)? (Choose three.)

  A. Windows Password
  B. API Signing Key
  C. Swift Password
  D. SSH Key
  E. Console Password
  B. API Signing Key
  C. Swift Password
  E. Console Password

  ---

  References: https://cloud.oracle.com/iaas/whitepapers/best-practices-for-iam-on-oci.pdfYou manage the following types of credentials with Oracle Cloud Infrastructure IAM:Console password: For signing in to the Console, which is the user interface for interacting with Oracle Cloud InfrastructureAPI signing key (in PEM format): For sending API requests, which require authenticationSwift password: For using a Swift client with Recovery Manager (RMAN) to back up an Oracle Database System (DB System) database to Object Storage

• Question 120:

  When creating a subnet, one or more placeholder security lists are often associated with the subnet. Why?

  A. Each operator needs its own security list.
  B. Each protocol needs its own security list.
  C. Each network endpoint or instance in the subnet needs its own security list.
  D. It is not possible to add or remove security lists after a subnet is created.
  C. Each network endpoint or instance in the subnet needs its own security list.

  ---

  References: https://docs.cloud.oracle.com/iaas/Content/Network/Concepts/securitylists.htm?tocpath=Services%7CNetworking%7CAccess%20and%20Security%7C_____3