[Dec 09, 2021] Latest 1Z0-1067-21 PDF Dumps & Real Tests Free Updated Today
1Z0-1067-21 Dumps With 100% Verified Q&As - Pass Guarantee or Full Refund
Oracle 1Z0-1067-21 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
| Topic 10 |
|
NEW QUESTION 19
You have been asked to ensure that in-transit communication between an Oracle Cloud Infrastructure (OCI) compute instance and an on-premises server (192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a Dynamic IPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added.
What solution should you recommend? (Choose the best answer.)
- A. The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.
- B. The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.
- C. Advertise a 192.168.10.10/32 router over the FastConnect.
- D. Advertise a 192.168.10.10/32 route over the VPN.
Answer: A
NEW QUESTION 20
You are using Oracle Cloud Infrastructure (OCI) console to set up an alarm on a budget to track your OCI spending.
Which two are valid targets for creating a budget in OCI? (Choose two.)
- A. Select Tenancy as the type of target for your budget.
- B. Select user as the type of target for your budget.
- C. Select Cost-Tracking Tags as the type of target for your budget.
- D. Select Compartment as the type of target for your budget.
- E. Select group as the type of target for your budget.
Answer: C,D
NEW QUESTION 21
You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.
The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the compute instance from the internet. However, you are not able to connect to the web server using your web browser.
Which step will resolve the issue? (Choose the best answer.)
- A. In the route table, add a rule for your default traffic to be routed to service gateway.
- B. In the security list, remove the ssh rule.
- C. In the route table, add a rule for your default traffic to be routed to NAT gateway.
- D. In the security list, add an ingress rule for port 80 (http).
Answer: A
NEW QUESTION 22
You are asked to implement the disaster recovery (DR) and business continuity requirements for Oracle Cloud Infrastructure (OCI) Block Volumes. Two OCI regions being used: a primary/source region and a DR/ destination region. The requirements are:
* There should be a copy of data in the destination region to use if a region-wide disaster occurs in the source region
* Minimize costs
Which design will help you meet these requirements? (Choose the best answer.)
- A. Back up block volumes. Use Object Storage lifecycle management to automatically move backup objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.
- B. Back up block volumes. Copy block volume backups from source region to destination region at regular intervals.
- C. Clone block volumes. Copy block volume clones from source region to destination region at regular intervals.
- D. Clone block volumes. Use Object Storage lifecycle management to automatically move clone objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.
Answer: A
NEW QUESTION 23
You have created a group for several auditors. You assign the following policies to the group:
What actions are the auditors allowed to perform within your tenancy? (Choose the best answer.)
- A. The Auditors can view resources in the tenancy.
- B. Auditors are able to view all resources in the compartment.
- C. Auditors are able to create new instances in the tenancy.
- D. The Auditors are able to delete resource in the tenancy.
Answer: B
NEW QUESTION 24
You have set an alarm to be generated when the CPU usage of a specified instance is greater than 10%. In the alarm behavior view below you notice that the critical condition happened around 23:30. You were expecting a notification after 1 minute, however, the alarm firing state did not begin until 23:33.
What should you change to fix it? (Choose the best answer.)
- A. Change the alarm's metric interval to 1.
- B. Change the notification topic that you previously associated with the alarm.
- C. Change the alarm condition to be grater than 3%.
- D. Change the alarm's trigger delay minutes value to 1.
Answer: D
NEW QUESTION 25
Your application is using an Object Storage bucket named app-data in the namespace vision, to store both persistent and temporary dat a. Every week all the temporary data should be deleted to limit the storage consumption.
Currently you need to navigate to the Object Storage page using the web console, select the appropriate bucket to view all the objects and delete the temporary ones.
To simplify the task you have configured the application to save all the temporary data with /temp prefix. You have also decided to use the Command Line Interface (CLI) to perform this operation.
What is the command you should use to speed up the data cleanup? (Choose the best answer.)
- A. oci os object delete -ns vision -bn app-data --prefix /temp
- B. oci os object delete app-data in vision where prefix = /temp
- C. oci objectstorage bulk-delete -ns vision -bn app-data --prefix /temp --force
- D. oci os object bulk-delete -ns vision -bn app-data --prefix /temp --force
Answer: D
NEW QUESTION 26
You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:
You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet.
Which action would you take to accomplish the task? (Choose the best answer.)
- A. Create a new security list with a stateful rule to allow ingress access on port 443 and associate it to the public subnet.
- B. In default security list, add a stateful rule to allow ingress access on port 443.
- C. Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the public subnet that hosts the company website.
- D. Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the instance that hosts the company website.
Answer: D
NEW QUESTION 27
You have been asked to review a network design for Oracle Cloud Infrastructure (OCI) by a major client. The client's IT team needs to provision two Virtual Cloud Networks (VCNs) for a major application. The application uses a large number of virtual machine instances. Additionally, in the future, a VCN peering will be required to allow connectivity between the VCNs.
Which of the following are valid IP ranges to consider? (Choose the best answer.)
- A. 10.0.0.0/8 and 11.0.0.0/8
- B. 10.0.8.0/21 and 10.0.16.0/22
- C. 10.0.0.0/30 and 192.168.0.0/30
- D. 10.0.0.0/16 and 10.0.64.0/24
Answer: D
NEW QUESTION 28
Multiple teams are sharing a tenancy in Oracle Cloud Infrastructure (OCI). You are asked to figure out an appropriate method to manage OCI costs.
Which is NOT a valid technique to accurately attribute costs to resources used by each team? (Choose the best answer.)
- A. Create separate compartment for each team. Use the OCI cost analysis tools to filter costs by compartment.
- B. Create an Identity and Access Management (IAM) group for each team. Create an OCI budget for each group to track spending.
- C. Define and use tags for resources used by each team. Analyze usage data from the OCI Usage Report which has detailed information about resources and tags.
- D. Create a Cost-Tracking tag. Apply this tag to all resources with team information. Use the OCI cost analysis tools to filter costs by tags.
Answer: B
NEW QUESTION 29
You are asked to implement the disaster recovery (DR) and business continuity requirements for Oracle Cloud Infrastructure (OCI) Block Volumes. Two OCI regions being used: a primary/source region and a DR/ destination region. The requirements are:
There should be a copy of data in the destination region to use if a region-wide disaster occurs in the source region Minimize costs Which design will help you meet these requirements? (Choose the best answer.)
- A. Back up block volumes. Use Object Storage lifecycle management to automatically move backup objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.
- B. Back up block volumes. Copy block volume backups from source region to destination region at regular intervals.
- C. Clone block volumes. Copy block volume clones from source region to destination region at regular intervals.
- D. Clone block volumes. Use Object Storage lifecycle management to automatically move clone objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.
Answer: A
NEW QUESTION 30
A developer has created a file system in Oracle Cloud Infrastructure (OCI) File Storage service. She launches an Oracle Linux compute instance and successfully mounts the file system from the instance.
She then tries writing to the file system from the compute instance using the following command:
touch /mnt/yourmountpoint/helloworld
But gets an error message:
touch: cannot touch '/mnt/yourmountpoint/helloworrld': Permission denied Which is a reason for this error? (Choose the best answer.)
- A. 'touch' command is not available in Oracle Linux by default.
- B. Service limits or quota for file system writes have been breached.
- C. User is not part of any OCI Identity and Access Management group with write permissions to File Storage service.
- D. User is connecting as the default Oracle Linux user 'opc' instead of 'root' user.
Answer: C
Explanation:
Explanation/Reference: https://itectec.com/unixlinux/touch-cannot-touch-test-permission-denied/
NEW QUESTION 31
You have been contracted by a local e-commerce company to assist with enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet, and a database in a separate, private subnet.
The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically.
After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)
- A. Create a failover policy in the Traffic Management service. Set the IP address of the public load balancer for the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.
- B. Deploy a new load balancer in the primary region. Create one backend set for the primary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.
- C. Create a load balancer policy in the Traffic Management service. Configure one answer for each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.
- D. Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A record. Inform customers to prepend the website URL with failover if the primary site is unavailable.
Answer: B
NEW QUESTION 32
A developer has created a file system in Oracle Cloud Infrastructure (OCI) File Storage service. She launches an Oracle Linux compute instance and successfully mounts the file system from the instance.
She then tries writing to the file system from the compute instance using the following command:
touch /mnt/yourmountpoint/helloworld
But gets an error message:
touch: cannot touch '/mnt/yourmountpoint/helloworrld': Permission denied Which is a reason for this error? (Choose the best answer.)
- A. 'touch' command is not available in Oracle Linux by default.
- B. Service limits or quota for file system writes have been breached.
- C. User is not part of any OCI Identity and Access Management group with write permissions to File Storage service.
- D. User is connecting as the default Oracle Linux user 'opc' instead of 'root' user.
Answer: C
NEW QUESTION 33
You have been asked to set up connectivity between a client's on-premises network and Oracle Cloud Infrastructure (OCI). The requirements are:
Low latency: The applications are financial and require low latency connectivity into OCI. Consistency: The application isn't tolerant of performance variation.
Performance: The communications link needs to support up to 1.25 Gbps.
Encryption: The communications link needs to encrypt any data in transit between the on-premises network and OCI Virtual Cloud Network (VCN).
The client wants to implement the above with as low a cost as possible, while meeting all of the requirements. What should you suggest? (Choose the best answer.)
- A. Provision FastConnect with a single private virtual circuit.
- B. Provision FastConnect with a single public virtual circuit.
- C. Provision FastConnect with a single private virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.
- D. Provision FastConnect with a single public virtual circuit, and run an IPsec VPN tunnel over the top of this
- E. Provision a site-to-site IPsec VPN between your on-premises network and your virtual cloud network (VCN) using VPN Connect.
Answer: A
Explanation:
virtual circuit.
NEW QUESTION 34
Your customer is running a set of compute instances inside a private subnet to manage their workloads on Oracle Cloud Infrastructure (OCI) tenancy. You have set up auto scaling feature to provide consistent performance to their end users during period of high demand.
Which step should be met for auto scaling to work? (Choose the best answer.)
- A. OS Management Service agent (osms) must be installed on the instances.
- B. Audit logs for the instances should be enabled.
- C. Service gateway should be setup to allow instances to send metrics to monitoring service.
- D. Monitoring for the instances should not be enabled.
Answer: B
NEW QUESTION 35
You have recently joined a startup company and quickly find that nobody is tracking the amount of money spent on Oracle Cloud Infrastructure (OCI). Seeing an opportunity to help save money you begin creating a solution to better track the cost of resources provisioned by each individual on the team.
Which option allows you to identify excessive spend across all resources in your tenancy? (Choose the best answer.)
- A. Create a tag namespace named BILLING with a Tag Key named CostCenter. Tag each of your resources with this Tag Key and the correct value.
- B. Use the Events Service and create rules that will act when a new Object Storage bucket or Compute Instance has been created. Have the rule email you each time one of these events occurs.
- C. Use the Python SDK to write a custom application that will monitor the Audit log. Look for CREATE events and configure the application to send you an email each time a new resource is created.
- D. Create a budget for each compartment that will send a notification when monthly spend reaches a pre- defined amount.
Answer: D
NEW QUESTION 36
You run a large global application with 90% of customers based in the US and Canad a. You want to be able to test a new feature and allow a small percentage of users to access the new version of your application.
What Oracle Cloud Infrastructure Traffic Management steering policy should you utilize? (Choose the best answer.)
- A. Geolocation steering
- B. Load Balancer
- C. ASN steering
- D. IP Prefix steering
Answer: A
NEW QUESTION 37
What is a key benefit of using Oracle Cloud Infrastructure's Resource Manager for your Terraform provisioning and management activities? (Choose the best answer.)
- A. Resource Manager manages to Terraform state file for your infrastructure and locks the file so that only one job at a time can run on a given stack.
- B. You can use Resource Manager to identify and maintain an inventory of all Compute and Database instances across your tenancy.
- C. You can use Resource Manager to apply patches to all existing Oracle Linux interfaces in a specified compartment.
- D. Resource Manager has administrative privileges by design. Even if your IAM user does not have access, you can leverage Resource Manager to provision new resources to any compartment in the Tenancy.
Answer: A
NEW QUESTION 38
......
2021 Valid 1Z0-1067-21 test answers & Oracle Exam PDF: https://www.actual4dumps.com/1Z0-1067-21-study-material.html