Buy Latest Jan 26, 2022 1Z0-1067-21 Exam Q&A PDF - One Year Free Update
Download the Latest 1Z0-1067-21 Dump - 2022 1Z0-1067-21 Exam Questions
Oracle 1Z0-1067-21 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
NEW QUESTION 20
You run a large global application with 90% of customers based in the US and Canad a. You want to be able to test a new feature and allow a small percentage of users to access the new version of your application.
What Oracle Cloud Infrastructure Traffic Management steering policy should you utilize? (Choose the best answer.)
- A. Geolocation steering
- B. IP Prefix steering
- C. ASN steering
- D. Load Balancer
Answer: A
NEW QUESTION 21
You have set an alarm to be generated when the CPU usage of a specified instance is greater than 10%. In the alarm behavior view below you notice that the critical condition happened around 23:30. You were expecting a notification after 1 minute, however, the alarm firing state did not begin until 23:33.
What should you change to fix it? (Choose the best answer.)
- A. Change the alarm's trigger delay minutes value to 1.
- B. Change the alarm condition to be grater than 3%.
- C. Change the notification topic that you previously associated with the alarm.
- D. Change the alarm's metric interval to 1.
Answer: A
NEW QUESTION 22
What is a key benefit of using Oracle Cloud Infrastructure's Resource Manager for your Terraform provisioning and management activities? (Choose the best answer.)
- A. Resource Manager has administrative privileges by design. Even if your IAM user does not have access, you can leverage Resource Manager to provision new resources to any compartment in the Tenancy.
- B. You can use Resource Manager to apply patches to all existing Oracle Linux interfaces in a specified compartment.
- C. Resource Manager manages to Terraform state file for your infrastructure and locks the file so that only one job at a time can run on a given stack.
- D. You can use Resource Manager to identify and maintain an inventory of all Compute and Database instances across your tenancy.
Answer: C
NEW QUESTION 23
You have been asked to investigate a potential security risk on your company's Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking through the audit logs for suspicious activity.
How can you retrieve the audit logs using the OCI Command Line Interface (CLI)? (Choose the best answer.) oci audit event list --end-time $end-time --compartment-id $compartment-id
- A. compartment-id $compartment-id
oci audit event list --start-time $start-time --end-time $end-time --tenancy- - B. id $tenancy-id
- C. oci audit event list --start-time $start-time --end-time $end-time --
- D. oci audit event list --start-time $start-time --compartment-id $compartment-id
Answer: A
NEW QUESTION 24
Your deployment platform within Oracle Cloud Infrastructure (OCI) leverages a compute instance with multiple block volumes attached. There are multiple teams that use the same compute instance and have access to these block volumes. You want to ensure that no one accidentally deletes any of these block volumes. You have started to construct the following IAM policy but need to determine which permissions should be used.
allow group DeploymentUsers to manage volume-family where ANY
{ request.permission != <???>, request.permission != <???>, request.permission !=
<???> }
Which permissions can you use in place of <???> in this policy? (Choose the best answer.)
- A. DELETE_VOLUME, DELETE_VOLUME_ATTACHMENT, DELETE_VOLUME_BACKUP
- B. ERASE_VOLUME, ERASE_VOLUME_ATTACHMENT, ERASE_VOLUME_BACKUP
- C. VOLUME_DELETE, VOLUME_ATTACHMENT_DELETE, VOLUME_BACKUP_DELETE
- D. VOLUME_ERASE, VOLUME_ATTACHMENT_ERASE, VOLUME_BACKUP_ERASE
Answer: C
Explanation:
https://docs.oracle.com/en-us/iaas/Content/Identity/Concepts/policyadvancedfeatures.htm
NEW QUESTION 25
Your team implemented a SaaS application that requires a whole system deployment for each new customer. The infrastructure provisioning is already automated via Terraform, and now you have been asked to develop an Ansible playbook to centralize configuration file management and deployment.
What is the most effective way to ensure your playbooks are utilizing up-to-date and accurate inventory? (Choose the best answer.)
- A. Download the dynamic inventory script provided by Oracle Cloud Infrastructure and include it in the playbook invocation command.
- B. Implement a Command Line Interface script to list all the resources and run it within Ansible to generate a dynamic inventory list.
- C. Export an inventory list using Terraform apply command.
- D. Export an inventory list from the Oracle Cloud Infrastructure Web console.
Answer: A
NEW QUESTION 26
You have created an Autonomous Data Warehouse (ADW) service in your company's Oracle Cloud Infrastructure (OCI) tenancy and you now have to load historical data into it. You have already extracted this historical data from multiple data marts and data warehouses. This data is stored in multiple CSV text files and these files are ranging in size from 25 MB to 20 GB.
Which is the most efficient and error tolerant method for loading data into ADW? (Choose the best answer.)
- A. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using the web console upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA for each CSV file to copy the contents into the corresponding ADW database table.
- B. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute Data Pump Import for each CSV file to copy the contents into the corresponding ADW database table.
- C. Create the tables in the ADW database and then execute SQL*Loader for each CSV file to load the contents into the corresponding ADW database table.
- D. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA for each CSV file to copy the contents into the corresponding ADW database table.
Answer: D
Explanation:
Using Object Storage and COPY_DATA is the standard recommended method for fetching data into ADW. Furthermore using CLI over web has the benefit of multipart upload, that is chunk upload of large files, thus reducing the chance of a transfer failure
NEW QUESTION 27
You have a web application running on Oracle Cloud Infrastructure (OCI) that lets users log in with a username and password. You notice that an attacker has tried to use SQL comment "--" to alter the database query, remove the password check and log in as a user. You decide to prevent any future attacks.
Which of the following OCI services or features would you choose to safeguard your application? (Choose the best answer.)
- A. Data Safe
- B. Vault
- C. Web Application Framework (WAF)
- D. Network Security Group
Answer: B
NEW QUESTION 28
You are asked to deploy a new application that has been designed to scale horizontally. The business stakeholders have asked that the application be deployed in us-phoenix-1.
Normal usage requires 2 OCPUs. You expect to have few spikes during the week, that will require up to 4 OCPUs, and a major usage uptick at the end of each month that will require 8 OCPUs.
What is the most cost-effective approach to implement a highly available and scalable solution? (Choose the best answer.)
- A. Create an instance with 1 OCPU shape. Use the Resize Instance action to scale up to a larger shape when more resources are needed.
- B. Create an instance with 1 OCPU shape. Use a CLI script to clone it when more resources are needed.
- C. Create an instance pool with a VM.Standard2.1 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances and a maximum of 8 instances.
- D. Create an instance pool with a VM.Standard2.2 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances, to handle the weekly spikes, and a maximum of 4 instances.
Answer: D
NEW QUESTION 29
You have been asked to investigate a potential security risk on your company's Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking through the audit logs for suspicious activity.
How can you retrieve the audit logs using the OCI Command Line Interface (CLI)? (Choose the best answer.)
- A. oci audit event list --end-time $end-time --compartment-id $compartment-id
- B. oci audit event list --start-time $start-time --end-time $end-time -- compartment-id $compartment-id
- C. oci audit event list --start-time $start-time --end-time $end-time --tenancy-id
- D. oci audit event list --start-time $start-time --compartment-id $compartment-id
Answer: B
Explanation:
$tenancy-id
Explanation:
https://docs.oracle.com/en-us/iaas/tools/oci-cli/2.9.7/oci_cli_docs/cmdref/audit/event/list.html
NEW QUESTION 30
You have been monitoring your company's applications running in Oracle Cloud Infrastructure (OCI) and notice that the application is using OCI Traffic Management service. This service uses a traffic steering policy to distribute the DNS traffic based on subnet addresses in a rule set.
Which steering policy is in use in this particular case? (Choose the best answer.)
- A. Load Balancing policy
- B. Geolocation steering
- C. IP Prefix steering
- D. ASN steering policy
Answer: C
Explanation:
IP Prefix steering policies enable customers to steer DNS traffic based on the IP Prefix of the originating query.
NEW QUESTION 31
You have recently joined a startup company and quickly find that nobody is tracking the amount of money spent on Oracle Cloud Infrastructure (OCI). Seeing an opportunity to help save money you begin creating a solution to better track the cost of resources provisioned by each individual on the team.
Which option allows you to identify excessive spend across all resources in your tenancy? (Choose the best answer.)
- A. Use the Events Service and create rules that will act when a new Object Storage bucket or Compute Instance has been created. Have the rule email you each time one of these events occurs.
- B. Use the Python SDK to write a custom application that will monitor the Audit log. Look for CREATEevents and configure the application to send you an email each time a new resource is created.
- C. Create a tag namespace named BILLINGwith a Tag Key named CostCenter. Tag each of your resources with this Tag Key and the correct value.
- D. Create a budget for each compartment that will send a notification when monthly spend reaches a pre- defined amount.
Answer: D
Explanation:
Explanation/Reference: https://blogs.oracle.com/cloud-infrastructure/how-to-get-control-of-your-spending-in-oracle-cloud- infrastructure
NEW QUESTION 32
You are working with Terraform on your laptop and have been tasked with spinning up multiple compute instances in Oracle Cloud Infrastructure (OCI) for a project. In addition, you are also required to collect IP addresses of provisioned instances and write them to a file and save it in your laptop.
Which specific Terraform functionality can help accomplish this task? (Choose the best answer.)
- A. Terraform local-exec
- B. Terraform remote-exec
- C. Terraform remote state
- D. Terraform modules
Answer: D
NEW QUESTION 33
You have created a geolocation steering policy in the Oracle Cloud Infrastructure (OCI) Traffic Management service, with this configuration:
What happens to requests that originate in Africa? (Choose the best answer.)
- A. The traffic will be forwarded at the same time to both Pool 1 and Pool 2.
- B. The traffic will be forwarded randomly to any of the pools mentioned in the rules.
- C. The traffic will be dropped.
- D. The traffic will be forwarded to Pool 1. If Pool 1 is not available, then it will be forwarded to Pool 2.
Answer: D
NEW QUESTION 34
You have been contracted by a local e-commerce company to assist with enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet, and a database in a separate, private subnet.
The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically.
After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)
- A. Create a load balancer policy in the Traffic Management service. Configure one answer for each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.
- B. Deploy a new load balancer in the primary region. Create one backend set for the primary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.
- C. Create a failover policy in the Traffic Management service. Set the IP address of the public load balancer for the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.
- D. Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A record. Inform customers to prepend the website URL with failover if the primary site is unavailable.
Answer: C
NEW QUESTION 35
Your company has restructured its HR departments. As part of this change, you also need to re-organize compartments within Oracle Cloud Infrastructure (OCI) to align them to the company's new organizational structure. The following change is required:
Compartment Team_x needs to be moved under a new parent compartment, Project_B The tenancy has the following policies defined for compartments Project_A and Project_B: Policy1: Allow group G1 to manage instance-family in compartment HR:Project_A Policy2: Allow group G2 to manage instance-family in compartment HR:Project_B Which two statements describe the impacts after the compartment Team_x is moved? (Choose two.)
- A. Group G2 can now manage instance-families in compartment Project_A but not in compartment Team_x
- B. Group G1 can now manage instance-families in compartment Project_A but not in compartment Team_x
- C. Group G2 can now manage instance-families in compartment Project_B, compartment Project_A and compartment Team_X
- D. Group G2 can now manage instance-families in compartment Project_B and compartment Team_X
- E. Group G1 can now manage instance-families in compartment Project_A, compartment Project_B and compartment Team_X
Answer: B,D
NEW QUESTION 36
You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:
You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet.
Which action would you take to accomplish the task? (Choose the best answer.)
- A. Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the instance that hosts the company website.
- B. In default security list, add a stateful rule to allow ingress access on port 443.
- C. Create a new security list with a stateful rule to allow ingress access on port 443 and associate it to the public subnet.
- D. Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the public subnet that hosts the company website.
Answer: A
Explanation:
Since we want to avoid exposing other instances in the same public subnet to the internet, Network Security Groups (NSG) must be used instead of Security Lists. NSG are attached to the vnic of the instance and not to the subnet
NEW QUESTION 37
Your application is using an Object Storage bucket named app-data in the namespace vision, to store both persistent and temporary dat a. Every week all the temporary data should be deleted to limit the storage consumption.
Currently you need to navigate to the Object Storage page using the web console, select the appropriate bucket to view all the objects and delete the temporary ones.
To simplify the task you have configured the application to save all the temporary data with /temp prefix. You have also decided to use the Command Line Interface (CLI) to perform this operation.
What is the command you should use to speed up the data cleanup? (Choose the best answer.)
- A. oci os object delete -ns vision -bn app-data --prefix /temp
- B. oci os object delete app-data in vision where prefix = /temp
- C. oci objectstorage bulk-delete -ns vision -bn app-data --prefix /temp --force
- D. oci os object bulk-delete -ns vision -bn app-data --prefix /temp --force
Answer: D
NEW QUESTION 38
One of your development teams has asked for your help to standardize the creation of several compute instances that must be provisioned each day of the week. You initially write several Command Line Interface (CLI) commands with all appropriate configuration parameters to achieve this task later determining this method lacks flexibility.
Which command generates a JSON-based template that Oracle Cloud Infrastructure (OCI) CLI can use to provision these instances on a regular basis? (Choose the best answer.)
- A. oci compute instance launch - -generate-full-command-json-input
- B. oci compute instance create - -generate-cli-skeleton
- C. oci compute instance launch - -generate-cli-skeleton
- D. oci compute provision-instance - -generate-full-command-json-input
Answer: A
Explanation:
https://docs.oracle.com/en-us/iaas/tools/oci-cli/3.0.5/oci_cli_docs/oci.html#cmdoption-generate-full-command-json-input
NEW QUESTION 39
You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.
The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the compute instance from the internet. However, you are not able to connect to the web server using your web browser.
Which step will resolve the issue? (Choose the best answer.)
- A. In the route table, add a rule for your default traffic to be routed to service gateway.
- B. In the route table, add a rule for your default traffic to be routed to NAT gateway.
- C. In the security list, remove the ssh rule.
- D. In the security list, add an ingress rule for port 80 (http).
Answer: A
NEW QUESTION 40
Here is a partial code from a Terraform template written for Oracle Cloud Infrastructure (OCI):
What operation(s) does it perform? (Choose the best answer.)
- A. Provides object read and write access for an OCI Object Storage bucket.
- B. Creates a URL to provide access to an OCI Object Storage bucket for managing objects.
- C. Creates a pre-authenticated request for objects in an OCI Object Storage bucket.
- D. Creates a lifecycle policy for an OCI Object Storage bucket for moving data to Archival storage at a specified time.
Answer: C
NEW QUESTION 41
Multiple teams are sharing a tenancy in Oracle Cloud Infrastructure (OCI). You are asked to figure out an appropriate method to manage OCI costs.
Which is NOT a valid technique to accurately attribute costs to resources used by each team? (Choose the best answer.)
- A. Create an Identity and Access Management (IAM) group for each team. Create an OCI budget for each group to track spending.
- B. Create separate compartment for each team. Use the OCI cost analysis tools to filter costs by compartment.
- C. Create a Cost-Tracking tag. Apply this tag to all resources with team information. Use the OCI cost analysis tools to filter costs by tags.
- D. Define and use tags for resources used by each team. Analyze usage data from the OCI Usage Report which has detailed information about resources and tags.
Answer: A
NEW QUESTION 42
You run a large global application with 90% of customers based in the US and Canad a. You want to be able to test a new feature and allow a small percentage of users to access the new version of your application.
What Oracle Cloud Infrastructure Traffic Management steering policy should you utilize? (Choose the best answer.)
- A. Geolocation steering
- B. IP Prefix steering
- C. ASN steering
- D. Load Balancer
Answer: D
Explanation:
https://docs.oracle.com/en-us/iaas/Content/TrafficManagement/Tasks/trafficmanagement.htm
NEW QUESTION 43
Multiple teams are sharing a tenancy in Oracle Cloud Infrastructure (OCI). You are asked to figure out an appropriate method to manage OCI costs.
Which is NOT a valid technique to accurately attribute costs to resources used by each team? (Choose the best answer.)
- A. Create an Identity and Access Management (IAM) group for each team. Create an OCI budget for each group to track spending.
- B. Create separate compartment for each team. Use the OCI cost analysis tools to filter costs by compartment.
- C. Create a Cost-Tracking tag. Apply this tag to all resources with team information. Use the OCI cost analysis tools to filter costs by tags.
- D. Define and use tags for resources used by each team. Analyze usage data from the OCI Usage Report which has detailed information about resources and tags.
Answer: A
Explanation:
Budgets are set on cost-tracking tags or on compartments not by user groups
NEW QUESTION 44
Which two statements about the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI) are TRUE? (Choose two.)
- A. The CLI allows you to use the Python language to interact with OCI APIs.
- B. You can filter CLI output using the JMESPath query option for JSON.
- C. The CLI provides the same core functionality as the Console, plus additional commands.
- D. You can run CLI commands from inside OCI Regions only.
- E. The CLI provides an automatic way to connect with instances provisioned on OCI.
Answer: B,C
NEW QUESTION 45
......
Verified 1Z0-1067-21 Dumps Q&As - 1 Year Free & Quickly Updates: https://www.practicedump.com/1Z0-1067-21_actualtests.html
Latest Oracle 1Z0-1067-21 Certification Practice Test Questions: https://drive.google.com/open?id=1_Wy0vHH8KQV8z8Jmvm42OqqYEnjfO0wG