1z0-1067-22 Free Certification Exam Easy to Download PDF Format 2023 [Q20-Q43]

QUESTION 20
What is a key benefit of using Oracle Cloud Infrastructure’s Resource Manager for your Terraform provisioning and management activities? (Choose the best answer.)

You can useResource Manager to apply patches to all existing Oracle Linux interfaces in a specified compartment.

Resource Manager has administrative privileges by design. Even if your IAM user does not have access, you can leverage Resource Manager to provision new resources to any compartment in the Tenancy.

You can use Resource Manager to identify and maintain an inventory of all Compute and Database instances across your tenancy.

Resource Manager manages to Terraform state file for your infrastructure andlocks the file so that only one job at a time can run on a given stack.

QUESTION 21
You have ordered two FastConnect connections that provide a high availability connection architecture between your on-premises data center and Oracle Cloud Infrastructure (OCI). You want to run these connections in an ACTIVE/PASSIVE architecture.
How can you accomplish this? (Choose the best answer.)

Decrease the prefix length of AS for the FastConnect you want touse as PASSIVE connection.

Enable BGP on the FastConnect that you want as the ACTIVE connection.

Use AS PATH prepending with your routes.

Adjust one of the connections to have a higher ASN.

QUESTION 22
One of your development teams has asked for your help to standardize the creation of several compute instances that must be provisioned each day of the week. You initially write several Command Line Interface (CLI) commands with all appropriate configuration parametersto achieve this task later determining this method lacks flexibility.
Which command generates a JSON-based template that Oracle Cloud Infrastructure (OCI) CLI can use to provision these instances on a regular basis? (Choose the best answer.)

oci compute instance create – -generate-cli-skeleton

oci compute instance launch – -generate-cli-skeleton

oci compute provision-instance – -generate-full-command-json-input

oci compute instance launch – -generate-full-command-json-input

QUESTION 23
You have a web application running on Oracle Cloud Infrastructure (OCI) that lets users log in with a username and password. You notice that an attacker has tried to use SQL comment “–” to alter the database query, remove the password check and log in as a user. You decide to prevent any future attacks.
Which of the following OCI services or features would you choose tosafeguard your application? (Choose the best answer.)

Network Security Group

Data Safe

Web Application Framework (WAF)

Vault

QUESTION 24
Multiple teams are sharing a tenancy in OracleCloud Infrastructure (OCI). You are asked to figure out an appropriate method to manage OCI costs.
Which is NOT a valid technique to accurately attribute costs to resources used by each team? (Choose the best answer.)

Create a Cost-Tracking tag. Apply this tag to all resources with team information. Use the OCI cost analysis tools to filter costs by tags.

Create separate compartment for each team. Use the OCI cost analysis tools to filter costs by compartment.

Create an Identity and Access Management (IAM) group for each team. Create an OCI budget for each group to track spending.

Define and use tags for resources used by each team. Analyze usage data from the OCI Usage Report which has detailed information about resources and tags.

QUESTION 25
You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:

You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet.
Which actionwould you take to accomplish the task? (Choose the best answer.)

Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the public subnet that hosts the company website.

In default security list,add a stateful rule to allow ingress access on port 443.

Create a new security list with a stateful rule to allow ingress access on port 443 and associate it to the public subnet.

Create a network security group, add a stateful rule to allow ingressaccess on port 443 and associate it to the instance that hosts the company website.

QUESTION 26
You are asked to implement the disaster recovery (DR) and business continuity requirements for Oracle Cloud Infrastructure (OCI) Block Volumes. Two OCI regions being used: a primary/source region and a DR/destination region. The requirements are:
* There should be a copy of data in the destination region to use if a region-wide disaster occurs in the source region
* Minimize costs
Which design will help you meet these requirements? (Choose the best answer.)

Clone block volumes. Use Object Storage lifecycle management to automatically move clone objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.

Clone block volumes. Copy block volume clonesfrom source region to destination region at regular intervals.

Back up block volumes. Copy block volume backups from source region to destination region at regular intervals.

Back up block volumes. Use Object Storage lifecycle management to automatically move backup objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.

QUESTION 27
You have a group pf developers who launch multiple VM.Standard2.2 compute instances every day into the compartment Dev. As a result, your OCI tenancyquickly hit the service limit for this shape. Other groups can no longer create new instances using VM.Standard2.2 shape.
Because of this, your company has issued a new mandate that the Dev compartment must include a quota to allow for use of only 20 VM.Standard2.2 shapes per Availability Domain. Your solution should not affect any other compartment in the tenancy.
Which quota statement should be used to implement this new requirement? (Choose the best answer.)

set compute quota vm-standard2-2count to10 in compartment dev where request.region = us-phoenix-1

set compute quota vm-standard2-2-count to 20 in compartment dev

zero compute quotas in tenancy set compute quota vm-standard2-2-count to 20 in compartment dev

zero compute quotas in tenancy set compute quota vm-standard2-2-count to 20 in tenancy dev

QUESTION 28
You created an Oracle Linux compute instance through the Oracle Cloud Infrastructure (OCI) management console then immediately realize you forgot toadd an SSH key file. You notice that OCI compute service provides instance console connections that supports adding SSH keys for a running instance. Hence, you created the console connection for your Linux server and activated it using the connection string provided.
However, now you get prompted for a username and password to login.
What option should you recommend to add the SSH key to your running instance, while minimizing the administrative overhead? (Choose the best answer.)

You need to configure the boot loader to use ttyS0 as a console terminal on the VM.

You need to terminate the running instance and recreate it by providing the SSH key file.

You need to reboot the instance from the console, boot into the bash shell in maintenance mode,and add SSH keys for the opc user.

You need to modify the serial console connection string to include the identity file flag, -i to specify the SSH key to use.

QUESTION 29
You have created the following JSON file to specify a lifecycle policy for one of your object storage buckets:

How will this policy affect the objects that are stored in the bucket? (Choose the best answer.)

Objects with the prefix “LOGS” will be retained for 120 days and then deleted permanently.

Objectscontaining the name prefix LOGS will be automatically migrated from standard Storage to Archive storage 30 days after the creation date. The object will be deleted 120 days after creation.

The objects with prefix “LOGS” will be deleted 30 days after creation date.

Objects containing the name prefix LOGS will be automatically migrated from standard Storage to Archive storage 30 days after the creation date. The object will be migrated back to standard Storage
120 days after creation.

QUESTION 30
A subscriber of an Oracle Cloud Infrastructure (OCI) Notifications service topic complained about not receiving messages from the service.
Which optioncan help you debug this issue? (Choose the best answer.)

If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service drops the message. Confirm that the subscriber is always online to receive messages to help debug the issue.

If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, check the NumberOfNotificationFailed metric through the OCI Monitoring service for failed messages. Copy these messages to an OCI ObjectStorage bucket. Make sure the subscriber has the required credentials to access this bucket to help debug the issue.

If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to one day. Make sure that the subscriber is online at least once a day to help debug the issue.

If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to two hours. Configure an alarm on the NumberOfNotificationFailed metric through the OCI Monitoring service to help debug the issue.

QUESTION 31
You havecreated a geolocation steering policy in the Oracle Cloud Infrastructure (OCI) Traffic Management service, with this configuration:

What happens to requests that originate in Africa? (Choose the best answer.)

The traffic will be forwarded at the same time to both Pool 1 and Pool 2.

The traffic will be dropped.

The traffic will be forwarded randomly to any of the pools mentioned in the rules.

The traffic will be forwarded to Pool 1. If Pool 1 is not available, then it will be forwarded toPool 2.

QUESTION 32
Your customer is running a set of compute instances inside a private subnet to manage their workloads on Oracle Cloud Infrastructure(OCI) tenancy. You have set up auto scaling feature to provide consistent performance to their end users during period of high demand.
Which step should be met for auto scaling to work? (Choose the best answer.)

OS Management Service agent (osms) mustbe installed on the instances.

Audit logs for the instances should be enabled.

Service gateway should be setup to allow instances to send metrics to monitoring service.

Monitoring for the instances should not be enabled.

QUESTION 33
You are working with Terraform on your laptop and have been tasked with spinning up multiple compute instances in Oracle Cloud Infrastructure (OCI) for a project. In addition, you are also required tocollect IP addresses of provisioned instances and write them to a file and save it in your laptop.
Which specific Terraform functionality can help accomplish this task? (Choose the best answer.)

Terraform modules

Terraform remote state

Terraform local-exec

Terraform remote-exec

QUESTION 34
You have created an Autonomous Data Warehouse (ADW) service in your company’s Oracle Cloud Infrastructure (OCI) tenancy and you now have to load historical data into it. You have already extracted this historical data from multiple data marts and data warehouses. This data is stored in multiple CSV text files and these files are ranging in size from 25 MB to 20 GB.
Which is the most efficient and error tolerant method for loading data into ADW? (Choose the best answer.)

CreateAuth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using the web console upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA foreach CSV file to copy the contents into the corresponding ADW database table.

Create the tables in the ADW database and then execute SQL*Loader for each CSV file to load the contents into the corresponding ADW database table.

Create Auth token, useit to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute Data Pump Import for each CSV file to copy the contents into the corresponding ADW database table.

Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA for each CSV file to copy the contents into the corresponding ADW database table.

QUESTION 35
You are using the Oracle Cloud Infrastructure Command Line Interface to launch a Linux virtual machine.
You enter the following command (with correct values for all parameters):

The command fails.
Which is NOT a valid parameter in this command? (Choose the best answer.)

-t <tenancy_id>

– -image-id <image_id>

– -shape “<shape_name>”

-c<compartment_id>

– -subnet-id <subnet_id>

QUESTION 36
You have been monitoring your company’s applications running in Oracle Cloud Infrastructure (OCI) and notice that the application is using OCI Traffic Management service. This service uses a traffic steering policy to distribute the DNS traffic based on subnet addresses in a rule set.
Which steering policy is in use in this particular case? (Choose the best answer.)

Load Balancing policy

Geolocation steering

ASN steering policy

IP Prefix steering

QUESTION 37
Which option contains the essential components of the Oracle Cloud Infrastructure Notifications service?
(Choose the best answer.)

An ALARM with a name unique across the tenancy, a SUBSCRIPTION, and a METRIC with the measurement of interest.

A TOPIC with a name unique across the tenancy, a SUBSCRIPTION, and a MESSAGE where content is published.

A TOPIC with a name unique across the compartment, a SUBSCRIPTION, and a MESSAGE where content is published.

An ALARM with a name unique across thecompartment, a SUBSCRIPTION, and a METRIC with the measurement of interest.

QUESTION 38
Recently, your e-commerce web application has been receiving significantly more traffic than usual. Users are reporting they often encounter a 503 Service Error when trying to access your site. Sometimes the site is very slow.
You check your instance pool configuration to confirm that the maximum number of instances is configured to allow 20 compute instances. Currently, 14 compute instances have been provisioned by the instance pool.
You also confirm that current CPU utilization across all hosts exceeds the scale-out threshold you set in your auto-scaling policy. However, the instance pool is not provisioning any newinstances.
What can you check to determine why the application is NOT functioning properly? (Choose the best answer.)

Verify that the new offer feature code did not introduce any performance bugs.

Verify that the database is accessible.

Verifythat the compute resource quota has not been exceeded.

Verify that the Quality Assurance team is not currently performing load-testing against production.

QUESTION 39
You are using Oracle CloudInfrastructure (OCI) console to set up an alarm on a budget to track your OCI spending.
Which two are valid targets for creating a budget in OCI? (Choose two.)

Select group as the type of target for your budget.

Select Tenancy as the type of targetfor your budget.

Select user as the type of target for your budget.

Select Cost-Tracking Tags as the type of target for your budget.

Select Compartment as the type of target for your budget.

QUESTION 40
You have created a group for several auditors. You assign the following policies tothe group:

What actions are the auditors allowed to perform within your tenancy? (Choose the best answer.)