Unique Top-selling 1Z0-1067-21 Exams - New 2021 Oracle Pratice Exam
Oracle Cloud Dumps 1Z0-1067-21 Exam for Full Questions - Exam Study Guide
NEW QUESTION 24
You are asked to implement the disaster recovery (DR) and business continuity requirements for Oracle Cloud Infrastructure (OCI) Block Volumes. Two OCI regions being used: a primary/source region and a DR/ destination region. The requirements are:
* There should be a copy of data in the destination region to use if a region-wide disaster occurs in the source region
* Minimize costs
Which design will help you meet these requirements? (Choose the best answer.)
- A. Clone block volumes. Copy block volume clones from source region to destination region at regular intervals.
- B. Back up block volumes. Copy block volume backups from source region to destination region at regular intervals.
- C. Back up block volumes. Use Object Storage lifecycle management to automatically move backup objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.
- D. Clone block volumes. Use Object Storage lifecycle management to automatically move clone objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.
Answer: C
NEW QUESTION 25
You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.
The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the compute instance from the internet. However, you are not able to connect to the web server using your web browser.
Which step will resolve the issue? (Choose the best answer.)
- A. In the route table, add a rule for your default traffic to be routed to service gateway.
- B. In the route table, add a rule for your default traffic to be routed to NAT gateway.
- C. In the security list, remove the ssh rule.
- D. In the security list, add an ingress rule for port 80 (http).
Answer: A
NEW QUESTION 26
You have been asked to review a network design for Oracle Cloud Infrastructure (OCI) by a major client. The client's IT team needs to provision two Virtual Cloud Networks (VCNs) for a major application. The application uses a large number of virtual machine instances. Additionally, in the future, a VCN peering will be required to allow connectivity between the VCNs.
Which of the following are valid IP ranges to consider? (Choose the best answer.)
- A. 10.0.0.0/30 and 192.168.0.0/30
- B. 10.0.0.0/16 and 10.0.64.0/24
- C. 10.0.0.0/8 and 11.0.0.0/8
- D. 10.0.8.0/21 and 10.0.16.0/22
Answer: B
NEW QUESTION 27
You have created a geolocation steering policy in the Oracle Cloud Infrastructure (OCI) Traffic Management service, with this configuration:
What happens to requests that originate in Africa? (Choose the best answer.)
- A. The traffic will be forwarded to Pool 1. If Pool 1 is not available, then it will be forwarded to Pool 2.
- B. The traffic will be forwarded randomly to any of the pools mentioned in the rules.
- C. The traffic will be forwarded at the same time to both Pool 1 and Pool 2.
- D. The traffic will be dropped.
Answer: A
NEW QUESTION 28
Here is a partial code from a Terraform template written for Oracle Cloud Infrastructure (OCI):
What operation(s) does it perform? (Choose the best answer.)
- A. Provides object read and write access for an OCI Object Storage bucket.
- B. Creates a URL to provide access to an OCI Object Storage bucket for managing objects.
- C. Creates a lifecycle policy for an OCI Object Storage bucket for moving data to Archival storage at a specified time.
- D. Creates a pre-authenticated request for objects in an OCI Object Storage bucket.
Answer: A
NEW QUESTION 29
You have a 750 MIB file in an Oracle Cloud Infrastructure (OCI) Object Storage bucket. You want to download the file in multiple parts to speed up the download using the OCI CLI. You also want to configure each part size to be 128 MIB.
Which is the correct OCI CLI command for this operation? (Choose the best answer.)
- A. oci os object download -ns my-namespace -bn my-bucket --name my-large-object -- multipart-download-threshold 750 --parallel-download-count 128
- B. oci os object download -ns my-namespace -bn my-bucket --name my-large-object -- resume-put --multipart-download-threshold 500 --part-size 128
- C. oci os object get -ns my-namespace -bn my-bucket --name my-large-object -- multipart-download-threshold 500 --part-size 128
- D. oci os object get -ns my-namespace -bn my-bucket --name my-large-object -- multipart-download-threshold 750 --parallel-download-count 128
Answer: C
NEW QUESTION 30
You have a 750 MIB file in an Oracle Cloud Infrastructure (OCI) Object Storage bucket. You want to download the file in multiple parts to speed up the download using the OCI CLI. You also want to configure each part size to be 128 MIB.
Which is the correct OCI CLI command for this operation? (Choose the best answer.) oci os object get -ns my-namespace -bn my-bucket --name my-large-object --
- A. --resume-put --multipart-download-threshold 500 --part-size 128
oci os object get -ns my-namespace -bn my-bucket --name my-large-object -- - B. multipart-download-threshold 750 --parallel-download-count 128
oci os object download -ns my-namespace -bn my-bucket --name my-large-object - C. multipart-download-threshold 500 --part-size 128
- D. --multipart-download-threshold 750 --parallel-download-count 128
oci os object download -ns my-namespace -bn my-bucket --name my-large-object
Answer: C
Explanation:
Explanation/Reference: https://docs.oracle.com/en-us/iaas/Content/API/SDKDocs/cliusing.htm
NEW QUESTION 31
You have recently joined a startup company and quickly find that nobody is tracking the amount of money spent on Oracle Cloud Infrastructure (OCI). Seeing an opportunity to help save money you begin creating a solution to better track the cost of resources provisioned by each individual on the team.
Which option allows you to identify excessive spend across all resources in your tenancy? (Choose the best answer.)
- A. Create a budget for each compartment that will send a notification when monthly spend reaches a pre- defined amount.
- B. Use the Python SDK to write a custom application that will monitor the Audit log. Look for CREATEevents and configure the application to send you an email each time a new resource is created.
- C. Use the Events Service and create rules that will act when a new Object Storage bucket or Compute Instance has been created. Have the rule email you each time one of these events occurs.
- D. Create a tag namespace named BILLINGwith a Tag Key named CostCenter. Tag each of your resources with this Tag Key and the correct value.
Answer: A
Explanation:
Explanation/Reference: https://blogs.oracle.com/cloud-infrastructure/how-to-get-control-of-your-spending-in-oracle-cloud- infrastructure
NEW QUESTION 32
An insurance company has contracted you to help automate their application business continuity plan. They have the application running in eu-frankfurt-1 as the primary site and uk-london-1 as a disaster recovery site.
Normally they have a DNS A record associated with the IP address of the primary endpoint in eu-frankfurt-1. In the event of a disaster, they use OCI DNS Zone Management to update the A record and replace it with the IP address of the endpoint in uk-londond-1.
How can you automate the failover process? (Choose the best answer.)
- A. Create a Health Check that evaluates both regional endpoints. Create a Traffic Management Steering policy with Failover type and associate it with the Health Check.
- B. Provision a Load Balancer in Frankfurt and associate it with the A record in DNS. Create a backend set with backend servers from both eu-frankfurt-1 and uk-london-1 regions.
- C. Create a Traffic Management Steering policy and attach it to a backend servers from both eu-frankfurt-1 and uk-london-1 regions.
- D. Create a Traffic Management Steering policy with Load Balancer type and add both eu-frankfurt-1 and uk- london-1 endpoints. Attach the Traffic Management Steering policy to the A record.
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION 33
You are using the Oracle Cloud Infrastructure Command Line Interface to launch a Linux virtual machine. You enter the following command (with correct values for all parameters):
The command fails.
Which is NOT a valid parameter in this command? (Choose the best answer.)
- A. - -shape "<shape_name>"
- B. -t <tenancy_id>
- C. -c <compartment_id>
- D. - -image-id <image_id>
- E. - -subnet-id <subnet_id>
Answer: B
NEW QUESTION 34
You have a group pf developers who launch multiple VM.Standard2.2 compute instances every day into the compartment Dev. As a result, your OCI tenancy quickly hit the service limit for this shape. Other groups can no longer create new instances using VM.Standard2.2 shape.
Because of this, your company has issued a new mandate that the Dev compartment must include a quota to allow for use of only 20 VM.Standard2.2 shapes per Availability Domain. Your solution should not affect any other compartment in the tenancy.
Which quota statement should be used to implement this new requirement? (Choose the best answer.)
- A. zero compute quotas in tenancy
set compute quota vm-standard2-2-count to 20 in compartment dev - B. zero compute quotas in tenancy
set compute quota vm-standard2-2-count to 20 in tenancy dev - C. set compute quota vm-standard2-2-count to 20 in compartment dev
- D. set compute quota vm-standard2-2count to 10 in compartment dev where request.region = us-phoenix-1
Answer: D
NEW QUESTION 35
You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG: NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:
However, after checking the bastion host logs, you discovered that there are IP addresses other than your own that can access your bastion host.
What is the root cause of this issue? (Choose the best answer.)
- A. A netmask of /32 allows all IP address in the 140.19.2.0 network, other than your IP 140.19.2.140
- B. The Security List allows access to all IP address which overrides the Network Security Group ingress rules.
- C. All compute instances associated with NSG-050504 are also able to connect to the bastion host.
- D. The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.
Answer: C
NEW QUESTION 36
Which statement about Oracle Cloud Infrastructure paravirtualized block volume attachments is TRUE? (Choose the best answer.)
- A. Paravirtualized volumes become immediately available on bare metal compute instances.
- B. Paravirtualization utilizes the internal storage stack of compute instance OS and network hardware virtualization to access block volumes.
- C. Paravirtualized is required to manage iSCSI configuration for virtual machine instances.
- D. Paravirtualized volumes may reduce the maximum IOPS performance for larger block volumes.
Answer: D
NEW QUESTION 37
Recently, your e-commerce web application has been receiving significantly more traffic than usual. Users are reporting they often encounter a 503 Service Error when trying to access your site. Sometimes the site is very slow.
You check your instance pool configuration to confirm that the maximum number of instances is configured to allow 20 compute instances. Currently, 14 compute instances have been provisioned by the instance pool.
You also confirm that current CPU utilization across all hosts exceeds the scale-out threshold you set in your auto-scaling policy. However, the instance pool is not provisioning any new instances.
What can you check to determine why the application is NOT functioning properly? (Choose the best answer.)
- A. Verify that the Quality Assurance team is not currently performing load-testing against production.
- B. Verify that the compute resource quota has not been exceeded.
- C. Verify that the new offer feature code did not introduce any performance bugs.
- D. Verify that the database is accessible.
Answer: B
NEW QUESTION 38
Which two statements are TRUE about Object Storage data security and encryption in Oracle Cloud Infrastructure (OCI)? (Choose two.)
- A. Data needs to be decrypted on the client side before retrieving it.
- B. OCI Vault Management is used by default to provide data security.
- C. Client-side encryption is managed by the customer.
- D. All traffic to and from Object Storage service is encrypted using TLS.
- E. A VPN connection to OCI is required to ensure secure data transfer to an object storage bucket.
Answer: C,D
NEW QUESTION 39
You have been contracted by a local e-commerce company to assist with enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet, and a database in a separate, private subnet.
The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically.
After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)
- A. Deploy a new load balancer in the primary region. Create one backend set for the primary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.
- B. Create a load balancer policy in the Traffic Management service. Configure one answer for each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.
- C. Create a failover policy in the Traffic Management service. Set the IP address of the public load balancer for the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.
- D. Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A record. Inform customers to prepend the website URL with failover if the primary site is unavailable.
Answer: A
NEW QUESTION 40
You have been asked to set up connectivity between a client's on-premises network and Oracle Cloud Infrastructure (OCI). The requirements are:
* Low latency: The applications are financial and require low latency connectivity into OCI.
* Consistency: The application isn't tolerant of performance variation.
* Performance: The communications link needs to support up to 1.25 Gbps.
* Encryption: The communications link needs to encrypt any data in transit between the on-premises network and OCI Virtual Cloud Network (VCN).
The client wants to implement the above with as low a cost as possible, while meeting all of the requirements.
What should you suggest? (Choose the best answer.)
- A. Provision FastConnect with a single public virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.
- B. Provision FastConnect with a single private virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.
- C. Provision a site-to-site IPsec VPN between your on-premises network and your virtual cloud network (VCN) using VPN Connect.
- D. Provision FastConnect with a single private virtual circuit.
- E. Provision FastConnect with a single public virtual circuit.
Answer: D
Explanation:
Explanation/Reference: https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/fastconnectoverview.htm
NEW QUESTION 41
You are using the Oracle Cloud Infrastructure Command Line Interface to launch a Linux virtual machine. You enter the following command (with correct values for all parameters):
The command fails.
Which is NOT a valid parameter in this command? (Choose the best answer.)
- A. - -shape "<shape_name>"
- B. -t <tenancy_id>
- C. -c <compartment_id>
- D. - -image-id <image_id>
- E. - -subnet-id <subnet_id>
Answer: B
NEW QUESTION 42
You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively.
You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us-phoenix-1 region only and not any other OCI regions.
What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.)
- A. Allow group PHX-Admins to manage all-resources in tenancy where request.permission= 'phx'
- B. Allow group PHX-Admins to manage all-resources in tenancy where request.region= 'phx'
- C. Allow group PHX-Admins to manage all-resources in tenancy where request.location= 'phx'
- D. Allow group PHX-Admins to manage all-resources in tenancy where request.target= 'phx'
Answer: B
NEW QUESTION 43
What is a key benefit of using Oracle Cloud Infrastructure's Resource Manager for your Terraform provisioning and management activities? (Choose the best answer.)
- A. Resource Manager has administrative privileges by design. Even if your IAM user does not have access, you can leverage Resource Manager to provision new resources to any compartment in the Tenancy.
- B. Resource Manager manages to Terraform state file for your infrastructure and locks the file so that only one job at a time can run on a given stack.
- C. You can use Resource Manager to apply patches to all existing Oracle Linux interfaces in a specified compartment.
- D. You can use Resource Manager to identify and maintain an inventory of all Compute and Database instances across your tenancy.
Answer: B
NEW QUESTION 44
You run a large global application with 90% of customers based in the US and Canad a. You want to be able to test a new feature and allow a small percentage of users to access the new version of your application.
What Oracle Cloud Infrastructure Traffic Management steering policy should you utilize? (Choose the best answer.)
- A. IP Prefix steering
- B. Geolocation steering
- C. Load Balancer
- D. ASN steering
Answer: B
NEW QUESTION 45
You created an Oracle Linux compute instance through the Oracle Cloud Infrastructure (OCI) management console then immediately realize you forgot to add an SSH key file. You notice that OCI compute service provides instance console connections that supports adding SSH keys for a running instance. Hence, you created the console connection for your Linux server and activated it using the connection string provided. However, now you get prompted for a username and password to login.
What option should you recommend to add the SSH key to your running instance, while minimizing the administrative overhead? (Choose the best answer.)
- A. You need to modify the serial console connection string to include the identity file flag, -i to specify the SSH key to use.
- B. You need to terminate the running instance and recreate it by providing the SSH key file.
- C. You need to configure the boot loader to use ttyS0 as a console terminal on the VM.
- D. You need to reboot the instance from the console, boot into the bash shell in maintenance mode, and add SSH keys for the opc user.
Answer: A
NEW QUESTION 46
......
Oracle 1Z0-1067-21 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
Best way to practice test for Oracle 1Z0-1067-21: https://www.exams4sures.com/Oracle/1Z0-1067-21-practice-exam-dumps.html