[Nov-2021] Pass 1Z0-1067-21 Exam in First Attempt Updated1Z0-1067-21 RealVCE Exam Question
Oracle Cloud Dumps 1Z0-1067-21 Exam for Full Questions - Exam Study Guide
Oracle 1Z0-1067-21 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
| Topic 10 |
|
NEW QUESTION 25
Which technique does NOT help you get the optimal performance out of the Oracle Cloud Infrastructure (OCI) File Storage service? (Choose the best answer.)
- A. Increase concurrency by using multiple threads, multiple clients, and multiple mount targets.
- B. Limit access to the same Availability Domain (AD) as the File Storage service where possible.
- C. Serialize operations to the file system to access consecutive blocks as much as possible.
- D. Right size compute instances from where file system is accessed based on their network capacity.
Answer: A
Explanation:
Section: (none)
Explanation
NEW QUESTION 26
You have been asked to set up connectivity between a client's on-premises network and Oracle Cloud Infrastructure (OCI). The requirements are:
* Low latency: The applications are financial and require low latency connectivity into OCI.
* Consistency: The application isn't tolerant of performance variation.
* Performance: The communications link needs to support up to 1.25 Gbps.
* Encryption: The communications link needs to encrypt any data in transit between the on-premises network and OCI Virtual Cloud Network (VCN).
The client wants to implement the above with as low a cost as possible, while meeting all of the requirements.
What should you suggest? (Choose the best answer.)
- A. Provision FastConnect with a single private virtual circuit.
- B. Provision FastConnect with a single public virtual circuit.
- C. Provision FastConnect with a single private virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.
- D. Provision a site-to-site IPsec VPN between your on-premises network and your virtual cloud network (VCN) using VPN Connect.
- E. Provision FastConnect with a single public virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.
Answer: A
Explanation:
Explanation/Reference: https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/fastconnectoverview.htm
NEW QUESTION 27
You have created the following JSON file to specify a lifecycle policy for one of your object storage buckets:
How will this policy affect the objects that are stored in the bucket? (Choose the best answer.)
- A. Objects containing the name prefix LOGS will be automatically migrated from standard Storage to Archive storage 30 days after the creation date. The object will be migrated back to standard Storage 120 days after creation.
- B. Objects containing the name prefix LOGS will be automatically migrated from standard Storage to Archive storage 30 days after the creation date. The object will be deleted 120 days after creation.
- C. Objects with the prefix "LOGS" will be retained for 120 days and then deleted permanently.
- D. The objects with prefix "LOGS" will be deleted 30 days after creation date.
Answer: B
NEW QUESTION 28
You are working as a Cloud Operations Administrator for your company. They have different Oracle Cloud Infrastructure (OCI) tenancies for development and production workloads. Each tenancy has resources in two regions - uk-london-1 and eu-frankfurt-1. You are asked to manage all resources and to automate all the tasks using OCI Command Line Interface (CLI).
Which is the most efficient method to manage multiple environments using OCI CLI? (Choose the best answer.)
- A. Use different bash terminals for each environment.
- B. Use OCI CLI profiles to create multiple sets of credentials in your config file, and reference the appropriate profile at runtime.
- C. Run oci setup config to create new credentials for each environment every time you want to access the environment.
- D. Create environment variables for the sets of credentials that align to each combination of tenancy, region, and environment.
Answer: D
NEW QUESTION 29
Which option contains the essential components of the Oracle Cloud Infrastructure Notifications service? (Choose the best answer.)
- A. A TOPIC with a name unique across the compartment, a SUBSCRIPTION, and a MESSAGE where content is published.
- B. An ALARM with a name unique across the compartment, a SUBSCRIPTION, and a METRIC with the measurement of interest.
- C. A TOPIC with a name unique across the tenancy, a SUBSCRIPTION, and a MESSAGE where content is published.
- D. An ALARM with a name unique across the tenancy, a SUBSCRIPTION, and a METRIC with the measurement of interest.
Answer: B
NEW QUESTION 30
What is a key benefit of using Oracle Cloud Infrastructure's Resource Manager for your Terraform provisioning and management activities? (Choose the best answer.)
- A. Resource Manager manages to Terraform state file for your infrastructure and locks the file so that only one job at a time can run on a given stack.
- B. You can use Resource Manager to identify and maintain an inventory of all Compute and Database instances across your tenancy.
- C. You can use Resource Manager to apply patches to all existing Oracle Linux interfaces in a specified compartment.
- D. Resource Manager has administrative privileges by design. Even if your IAM user does not have access, you can leverage Resource Manager to provision new resources to any compartment in the Tenancy.
Answer: A
Explanation:
Explanation/Reference: https://docs.oracle.com/en-us/iaas/Content/ResourceManager/Concepts/ samplecomputeinstance.htm
NEW QUESTION 31
You have been asked to investigate a potential security risk on your company's Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking through the audit logs for suspicious activity.
How can you retrieve the audit logs using the OCI Command Line Interface (CLI)? (Choose the best answer.) oci audit event list --end-time $end-time --compartment-id $compartment-id
- A. oci audit event list --start-time $start-time --end-time $end-time --
- B. compartment-id $compartment-id
oci audit event list --start-time $start-time --end-time $end-time --tenancy- - C. id $tenancy-id
- D. oci audit event list --start-time $start-time --compartment-id $compartment-id
Answer: B
NEW QUESTION 32
You have created an Autonomous Data Warehouse (ADW) service in your company's Oracle Cloud Infrastructure (OCI) tenancy and you now have to load historical data into it. You have already extracted this historical data from multiple data marts and data warehouses. This data is stored in multiple CSV text files and these files are ranging in size from 25 MB to 20 GB.
Which is the most efficient and error tolerant method for loading data into ADW? (Choose the best answer.)
- A. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute Data Pump Import for each CSV file to copy the contents into the corresponding ADW database table.
- B. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA for each CSV file to copy the contents into the corresponding ADW database table.
- C. Create the tables in the ADW database and then execute SQL*Loader for each CSV file to load the contents into the corresponding ADW database table.
- D. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using the web console upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA for each CSV file to copy the contents into the corresponding ADW database table.
Answer: B
NEW QUESTION 33
What is a key benefit of using Oracle Cloud Infrastructure's Resource Manager for your Terraform provisioning and management activities? (Choose the best answer.)
- A. Resource Manager manages to Terraform state file for your infrastructure and locks the file so that only one job at a time can run on a given stack.
- B. You can use Resource Manager to identify and maintain an inventory of all Compute and Database instances across your tenancy.
- C. You can use Resource Manager to apply patches to all existing Oracle Linux interfaces in a specified compartment.
- D. Resource Manager has administrative privileges by design. Even if your IAM user does not have access, you can leverage Resource Manager to provision new resources to any compartment in the Tenancy.
Answer: A
NEW QUESTION 34
You have been asked to set up connectivity between a client's on-premises network and Oracle Cloud Infrastructure (OCI). The requirements are:
Low latency: The applications are financial and require low latency connectivity into OCI. Consistency: The application isn't tolerant of performance variation.
Performance: The communications link needs to support up to 1.25 Gbps.
Encryption: The communications link needs to encrypt any data in transit between the on-premises network and OCI Virtual Cloud Network (VCN).
The client wants to implement the above with as low a cost as possible, while meeting all of the requirements. What should you suggest? (Choose the best answer.)
- A. Provision FastConnect with a single private virtual circuit.
- B. Provision FastConnect with a single public virtual circuit.
- C. Provision FastConnect with a single private virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.
- D. Provision FastConnect with a single public virtual circuit, and run an IPsec VPN tunnel over the top of this
- E. Provision a site-to-site IPsec VPN between your on-premises network and your virtual cloud network (VCN) using VPN Connect.
Answer: A
Explanation:
virtual circuit.
NEW QUESTION 35
You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively.
You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us-phoenix-1 region only and not any other OCI regions.
What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.)
- A. Allow group PHX-Admins to manage all-resources in tenancy where request.region= 'phx'
- B. Allow group PHX-Admins to manage all-resources in tenancy where request.location= 'phx'
- C. Allow group PHX-Admins to manage all-resources in tenancy where request.permission= 'phx'
- D. Allow group PHX-Admins to manage all-resources in tenancy where request.target= 'phx'
Answer: A
NEW QUESTION 36
You have created the following JSON file to specify a lifecycle policy for one of your object storage buckets:
How will this policy affect the objects that are stored in the bucket? (Choose the best answer.)
- A. Objects containing the name prefix LOGS will be automatically migrated from standard Storage to Archive storage 30 days after the creation date. The object will be migrated back to standard Storage 120 days after creation.
- B. Objects containing the name prefix LOGS will be automatically migrated from standard Storage to Archive storage 30 days after the creation date. The object will be deleted 120 days after creation.
- C. Objects with the prefix "LOGS" will be retained for 120 days and then deleted permanently.
- D. The objects with prefix "LOGS" will be deleted 30 days after creation date.
Answer: B
NEW QUESTION 37
You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.
The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the compute instance from the internet. However, you are not able to connect to the web server using your web browser.
Which step will resolve the issue? (Choose the best answer.)
- A. In the route table, add a rule for your default traffic to be routed to service gateway.
- B. In the security list, remove the ssh rule.
- C. In the route table, add a rule for your default traffic to be routed to NAT gateway.
- D. In the security list, add an ingress rule for port 80 (http).
Answer: A
NEW QUESTION 38
You have been asked to ensure that in-transit communication between an Oracle Cloud Infrastructure (OCI) compute instance and an on-premises server (192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a Dynamic IPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added.
What solution should you recommend? (Choose the best answer.)
- A. The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.
- B. The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.
- C. Advertise a 192.168.10.10/32 router over the FastConnect.
- D. Advertise a 192.168.10.10/32 route over the VPN.
Answer: A
NEW QUESTION 39
Your application is using an Object Storage bucket named app-data in the namespace vision, to store both persistent and temporary dat a. Every week all the temporary data should be deleted to limit the storage consumption.
Currently you need to navigate to the Object Storage page using the web console, select the appropriate bucket to view all the objects and delete the temporary ones.
To simplify the task you have configured the application to save all the temporary data with /temp prefix. You have also decided to use the Command Line Interface (CLI) to perform this operation.
What is the command you should use to speed up the data cleanup? (Choose the best answer.)
- A. oci os object delete -ns vision -bn app-data --prefix /temp
- B. oci os object delete app-data in vision where prefix = /temp
- C. oci objectstorage bulk-delete -ns vision -bn app-data --prefix /temp --force
- D. oci os object bulk-delete -ns vision -bn app-data --prefix /temp --force
Answer: D
NEW QUESTION 40
You have created a group for several auditors. You assign the following policies to the group:
What actions are the auditors allowed to perform within your tenancy? (Choose the best answer.)
- A. The Auditors can view resources in the tenancy.
- B. Auditors are able to view all resources in the compartment.
- C. Auditors are able to create new instances in the tenancy.
- D. The Auditors are able to delete resource in the tenancy.
Answer: B
NEW QUESTION 41
You have recently joined a startup company and quickly find that nobody is tracking the amount of money spent on Oracle Cloud Infrastructure (OCI). Seeing an opportunity to help save money you begin creating a solution to better track the cost of resources provisioned by each individual on the team.
Which option allows you to identify excessive spend across all resources in your tenancy? (Choose the best answer.)
- A. Use the Events Service and create rules that will act when a new Object Storage bucket or Compute Instance has been created. Have the rule email you each time one of these events occurs.
- B. Create a tag namespace named BILLINGwith a Tag Key named CostCenter. Tag each of your resources with this Tag Key and the correct value.
- C. Create a budget for each compartment that will send a notification when monthly spend reaches a pre- defined amount.
- D. Use the Python SDK to write a custom application that will monitor the Audit log. Look for CREATEevents and configure the application to send you an email each time a new resource is created.
Answer: C
Explanation:
Explanation/Reference: https://blogs.oracle.com/cloud-infrastructure/how-to-get-control-of-your-spending-in-oracle-cloud- infrastructure
NEW QUESTION 42
Security Testing Policy describes when and how you may conduct certain types of security testing of Oracle Cloud Services, including vulnerability and penetration tests, as well as tests involving data scraping tools.
What does Oracle allow as part of this testing? (Choose the best answer.)
- A. Customers can validate that their network resources are isolated from other customer resources.
- B. Customers can simulate DoS attack scenarios as long as it's restricted to the customer's own environment.
- C. Customers are allowed to test Oracle Cloud Infrastructure (OCI) hardware related to resources in their tenancy.
- D. Customers are allowed to use their own testing and monitoring tools.
Answer: C
NEW QUESTION 43
You created an Oracle Linux compute instance through the Oracle Cloud Infrastructure (OCI) management console then immediately realize you forgot to add an SSH key file. You notice that OCI compute service provides instance console connections that supports adding SSH keys for a running instance. Hence, you created the console connection for your Linux server and activated it using the connection string provided.
However, now you get prompted for a username and password to login.
What option should you recommend to add the SSH key to your running instance, while minimizing the administrative overhead? (Choose the best answer.)
- A. You need to modify the serial console connection string to include the identity file flag, -i to specify the SSH key to use.
- B. You need to configure the boot loader to use ttyS0 as a console terminal on the VM.
- C. You need to terminate the running instance and recreate it by providing the SSH key file.
- D. You need to reboot the instance from the console, boot into the bash shell in maintenance mode, and add SSH keys for the opc user.
Answer: A
Explanation:
Explanation/Reference: https://docs.oracle.com/en-us/iaas/Content/Compute/References/serialconsole.htm
NEW QUESTION 44
......
Authentic Best resources for 1Z0-1067-21 Online Practice Exam: https://www.realvce.com/1Z0-1067-21_free-dumps.html