Oracle 1Z0-1085-24 Online Practice Questions and Exam Preparation

Oracle 1Z0-1085-24 Online Questions & Answers

• Question 1:

  Which three services Integrate with Oracle Cloud Infrastructure (OCI) Key Management?

  A. Functions
  B. Block Volume
  C. Object Storage
  D. Auto Scaling
  E. Identity and Access Management
  F. File Storage
  B. Block Volume
  C. Object Storage
  F. File Storage

  ---

  Explanation/Reference:

  DATA ENCRYPTION

  Protect customer data at-rest and in-transit in a way that allows customers to meet their security and compliance requirements for cryptographic algorithms and key management The Oracle Cloud Infrastructure Block Volume service always

  encrypts all block volumes, boot volumes, and volume backups at rest by using the Advanced Encryption Standard (AES) algorithm with 256-bit encryption. By default all volumes and their backups are encrypted using the Oracle- provided

  encryption keys. Each time a volume is cloned or restored from a backup the volume is assigned a new unique encryption key.

  The File Storage service encrypts all file system and snapshot data at rest. By default all file systems are encrypted using Oracle-managed encryption keys. You have the option to encrypt all of your file systems using the keys that you own

  and manage using the Vault service. Object Storage employs 256-bit Advanced Encryption Standard (AES-256) to encrypt object data on the server. Each object is encrypted with its own data encryption key. Data encryption keys are always

  encrypted with a master encryption key that is assigned to the bucket. Encryption is enabled by default and cannot be turned off. By default, Oracle manages the master encryption key.

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/Block/Concepts/overview.htm https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Concepts/objectstorageoverview.htm https://docs.cloud.oracle.com/en-us/iaas/Content/File/Concepts/

  filestorageoverview.htm

  Oracle Cloud Infrastructure Key Management is a managed service that enables you to encrypt your data using keys that you control.IAM, Autoscaling and functions cannot be used with Key Management and hence are incorrect options.

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/KeyManagement/Concepts/keyoverview.htm

• Question 2:

  What two statements regarding the Virtual Cloud Network (VCN) are true?

  A. A single VCN can contain both private and public Subnets.
  B. VCN is a regional resource that span across all the Availability Domains in a Region.
  C. You can only create one VCN per region.
  D. The VCN is the IPSec-based connection with a remote on premises location.
  E. VCN is a global resource that span across all the Regions
  A. A single VCN can contain both private and public Subnets.
  B. VCN is a regional resource that span across all the Availability Domains in a Region.

  ---

  Explanation/Reference:

  When you work with Oracle Cloud Infrastructure, one of the first steps is to set up a virtual cloud network (VCN) for your cloud resources.

  VIRTUAL CLOUD NETWORK (VCN) :

  A virtual, private network that you set up in Oracle data centers. It closely resembles a traditional network, with firewall rules and specific types of communication gateways that you can choose to use. A VCN resides in a single Oracle Cloud

  Infrastructure region and covers a single, contiguous IPv4 CIDR block of your choice. See Allowed VCN Size and Address Ranges. The terms virtual cloud network, VCN, and cloud network are used interchangeably in this documentation.

  For more information, see VCNs and Subnets.

  SUBNETS :

  Subdivisions you define in a VCN (for example, 10.0.0.0/24 and 10.0.1.0/24). Subnets contain virtual network interface cards (VNICs), which attach to instances. Each subnet consists of a contiguous range of IP addresses that do not overlap

  with other subnets in the VCN. You can designate a subnet to exist either in a single availability domainavailability domain or across an entire region (regional subnets are recommended). Subnets act as a unit of configuration within the VCN:

  All VNICs in a given subnet use the same route table, security lists, and DHCP options (see the definitions that follow). You can designate a subnet as either public or private when you create it. Private means VNICs in the subnet can't have

  public IP addresses. Public means VNICs in the subnet can have public IP addresses at your discretion. See Access to the Internet.

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Concepts/overview.htm

• Question 3:

  Which Oracle Cloud Infrastructure service can you use to assess user security of your Oracle databases?

  A. Oracle Data Safe
  B. Oracle Data Guard
  C. Audit Vault and Database Firewall option for Oracle Database Enterprise Edition
  D. Audit Service
  A. Oracle Data Safe

  ---

  Explanation/Reference:

  Oracle Data Safe is a unified control center for your Oracle databases which helps you understand the sensitivity of your data, evaluate risks to data, mask sensitive data, implement and monitor security controls, assess user security, monitor

  user activity, and address data security compliance requirements.

  Whether you're using an Autonomous Database or an Oracle DB system, Oracle Data Safe delivers essential data security capabilities as a service on Oracle Cloud Infrastructure.

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/data-safe/doc/oracle-data-safe-overview.html

• Question 4:

  Which is NOT required to register and log support requests in My Oracle Support (MOS)?

  A. Your Customer Support Identifier (CSl)
  B. Your account password
  C. Your tenancy OCID (Oracle Cloud Identifier)
  D. Your resource OCID (Oracle Cloud Identifier)
  D. Your resource OCID (Oracle Cloud Identifier)

  ---

  Explanation/Reference:

  You can open a support service request with Oracle Support To create a service request:

  Go to My Oracle Support and sign in.

  If you are not signed in to Oracle Cloud Support, click Switch to Cloud Support at the top of the page.

  Click Create Service Request.

  Select the following from the displayed menus:

  Service Type: Select Oracle Cloud Infrastructure from the list. Service Name: Select the appropriate option for your organization. Problem Type: Select your problem type from the list.

  Enter your contact information.

  Enter a Description, and then enter the required fields specific to your issue. For most Oracle Cloud Infrastructure issues you need to include the OCID (Oracle Cloud Identifier) for each resource you need help with. See Locating Oracle Cloud

  Infrastructure IDs for instructions on locating these.

  Reference:

  https://www.zerowait-state.com/blog/create-sr/

• Question 5:

  Which Oracle Cloud Infrastructure Object Storage tier is suitable for data that needs to be accessed quickly and frequently, with a high level of data accessibility and performance?

  A. Archive Storage
  B. Auto-Tiering
  C. Standard Storage
  D. Infrequent Access Storage
  C. Standard Storage

  ---

  Explanation/Reference:

  Standard Storage is the tier in Oracle Cloud Infrastructure Object Storage that is suitable for data that needs to be accessed quickly and frequently, with a high level of data accessibility and performance. It provides high- performance storage with low latency for data that requires frequent access.

• Question 6:

  Which three components are part of Oracle Cloud Infrastructure Identity and Access Management service?

  A. Virtual Cloud Networks
  B. Policies
  C. Regional Subnets
  D. Dynamic Groups
  E. Roles
  F. Compute Instances
  G. Users
  B. Policies
  D. Dynamic Groups
  G. Users

  ---

  Explanation/Reference:

  IAM components are RESOURCE The cloud objects that your company's employees create and use when interacting with Oracle Cloud Infrastructure. For example: compute instances, block storage volumes, virtual cloud networks (VCNs), subnets, route tables, etc. USER An individual employee or system that needs to manage or use your company's Oracle Cloud Infrastructure resources. Users might need to launch instances, manage remote disks, work with your virtual cloud network, etc. End users of your application are not typically IAM users. Users have one or more IAM credentials (see User Credentials). POLICY A document that specifies who can access which resources, and how. Access is granted at the group and compartment level, which means you can write a policy that gives a group a specific type of access within a specific compartment, or to the tenancy itself. If you give a group access to the tenancy, the group automatically gets the same type of access to all the compartments inside the tenancy. For more information, see Example Scenario and How Policies Work. The word "policy" is used by people in different ways: to mean an individual statement written in the policy language; to mean a collection of statements in a single, named "policy" document (which has an Oracle Cloud ID (OCID) assigned to it); and to mean the overall body of policies your organization uses to control access to resources. GROUP A collection of users who all need the same type of access to a particular set of resources or compartment.

  DYNAMIC GROUP

  A special type of group that contains resources (such as compute instances) that match rules that you define (thus the membership can change dynamically as matching resources are created or deleted). These instances act as "principal"

  actors and can make API calls to services according to policies that you write for the dynamic group.

  NETWORK SOURCE

  A group of IP addresses that are allowed to access resources in your tenancy. The IP addresses can be public IP addresses or IP addresses from a VCN within your tenancy. After you create the network source, you use policy to restrict

  access to only requests that originate from the IPs in the network source.

  COMPARTMENT

  A collection of related resources. Compartments are a fundamental component of Oracle Cloud Infrastructure for organizing and isolating your cloud resources. You use them to clearly separate resources for the purposes of measuring usage

  and billing, access (through the use of policies), and isolation (separating the resources for one project or business unit from another). A common approach is to create a compartment for each major part of your organization. For more

  information, see Setting Up Your Tenancy.

  TENANCY

  The root compartment that contains all of your organization's Oracle Cloud Infrastructure resources. Oracle automatically creates your company's tenancy for you. Directly within the tenancy are your IAM entities (users, groups,

  compartments, and some policies; you can also put policies into compartments inside the tenancy). You place the other types of cloud resources (e.g., instances, virtual networks, block storage volumes, etc.) inside the compartments that you

  create.

  HOME REGION

  The region where your IAM resources reside. All IAM resources are global and available across all regions, but the master set of definitions reside in a single region, the home region. You must make changes to your IAM resources in your

  home region. The changes will be automatically propagated to all regions. For more information, see Managing Regions.

  FEDERATION

  A relationship that an administrator configures between an identity provider and a service provider. When you federate Oracle Cloud Infrastructure with an identity provider, you manage users and groups in the identity provider. You manage

  authorization in Oracle Cloud Infrastructure's IAM service. Oracle Cloud Infrastructure tenancies are federated with Oracle Identity Cloud Service by default.

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/data-safe/doc/iam-components.html

• Question 7:

  After Signing up for a new Oracle cloud Infrastructure tenancy, what would you subscribe to in order to deploy infrastructure and services in different parts of the world?

  A. Availability Domain
  B. Fault Domains
  C. Pay as you go pricing
  D. Region
  D. Region

  ---

  Explanation/Reference:

  Oracle Cloud Infrastructure is hosted in regions and availability domains. A region is a localized geographic area, and an availability domain is one or more data centers located within a region. A region is composed of one or more availability domains. Most Oracle Cloud Infrastructure resources are either region-specific, such as a virtual cloud network, or availability domain-specific, such as a compute instance. Traffic between availability domains and between regions is encrypted. Availability domains are isolated from each other, fault tolerant, and very unlikely to fail simultaneously. Because availability domains do not share infrastructure such as power or cooling, or the internal availability domain network, a failure at one availability domain within a region is unlikely to impact the availability of the others within the same region. The availability domains within the same region are connected to each other by a low latency, high bandwidth network, which makes it possible for you to provide high-availability connectivity to the internet and on-premises, and to build replicated systems in multiple availability domains for both high-availability and disaster recovery. Oracle is adding multiple cloud regions around the world to provide local access to cloud resources for our customers. To accomplish this quickly, we've chosen to launch regions in new geographies with one availability domain. As regions require expansion, we have the option to add capacity to existing availability domains, to add additional availability domains to an existing region, or to build a new region. The expansion approach in a particular scenario is based on customer requirements as well as considerations of regional demand patterns and resource availability. For any region with one availability domain, a second availability domain or region in the same country or geo-political area will be made available within a year to enable further options for disaster recovery that support customer requirements

  for data residency where they exist.

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/General/Concepts/regions.htm

• Question 8:

  Which gateway can be used to provide internet access to an Oracle Cloud Infrastructure compute instance in a private subnet?

  A. NAT Gateway
  B. Service Gateway
  C. Dynamic Routing Gateway
  D. Internet Gateway
  A. NAT Gateway

  ---

  Explanation/Reference:

  A NAT gateway gives cloud resources without public IP addresses access to the internet without exposing those resources to incoming internet connections.

  

  

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/NATgateway.htm

• Question 9:

  Which Oracle Cloud Infrastructure service is responsible for securely storing and managing encryption keys and secrets?

  A. Cloud Guard
  B. Security Zones
  C. Security Advisor
  D. Vault
  D. Vault

  ---

  Explanation/Reference:

  Vault is the Oracle Cloud Infrastructure service responsible for securely storing and managing encryption keys and secrets. It provides a centralized and secure location for managing sensitive information such as encryption keys, passwords, and API keys.

• Question 10:

  Which is NOT a component of an Identity and Access Management (IAM) policy statement in Oracle Cloud Infrastructure?

  A. Location
  B. Resource-type
  C. Action Verb
  D. Data backup frequency
  D. Data backup frequency

  ---

  Explanation/Reference:

  IAM policies define access control by specifying who can access which resources and what actions they can perform. Data backup frequency is not a component of IAM policy statements.