[Dec 01, 2021] 1Z0-1072-20 Dumps Full Questions - Exam Study Guide
Oracle Cloud Solutions Infrastructure Free Certification Exam Material from VCEPrep with 240 Questions
Oracle 1Z0-1072-20 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
NEW QUESTION 103
Which two resources reside exclusively in a single Oracle Cloud Infrastructure Availability Domain? (Choose two.)
- A. Block volume
- B. Object Storage
- C. Compute instance
- D. Web Application Firewall policy
- E. Identity and Access Management Groups
Answer: A,C
Explanation:
Availability Domain-Specific Resources
DB Systems
ephemeral public IPs
instances: They can be attached only to volumes in the same availability domain.
subnets: When you create a subnet, you choose whether it is regional or specific to an availability domain. Oracle recommends using regional subnets.
volumes: They can be attached only to an instance in the same availability domain.
NEW QUESTION 104
For what business need should you use Database Cloud Service (DBCS) instead of Oracle database on a compute instance?
- A. to bring your own license on a compute service
- B. to implement Oracle RAC for high availability
- C. to build an Oracle database on a compute service
- D. to lower license and infrastructure cost
Answer: B
NEW QUESTION 105
With regard to Oracle Cloud Infrastructure Load Balancing service, which two actions will occur when a backend server that is registered with a backend set is marked to drain connections? (Choose two.)
- A. Requests to this backend server are redirected to a user-defined error page.
- B. Connections to this backend server will remain open until all in-flight requests are completed.
- C. All existing connections to this backend sever will be immediately closed.
- D. All new connections to this backend server are disallowed.
- E. All connections to this backend server are forcibly closed after a timeout period.
Answer: B,D
Explanation:
Explanation
Explanation/Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Balance/Reference/sessionpersistence.htm
NEW QUESTION 106
Which two statements about Oracle Cloud Infrastructure File Storage Service are accurate? (Choose two.)
- A. File systems use Oracle-managed keys by default.
- B. Customer can encrypt the communication to a mount target via export options.
- C. Communication with file systems in a mount target is encrypted via HTTPS.
- D. Mount targets use Oracle-managed keys by default.
- E. Customer can encrypt data in their file system using their own Vault encryption key.
Answer: D,E
Explanation:
Reference:
https://docs.cloud.oracle.com/en-us/iaas/Content/File/Concepts/filestorageoverview.htm
NEW QUESTION 107
Which three must be configured for a load balancer to accept incoming traffic? (Choose two.)
- A. a back end set
- B. a security list that is open on a listener port
- C. a listener
- D. a certificate
- E. a back-end server
Answer: A,C,E
Explanation:
Explanation
https://docs.cloud.oracle.com/iaas/Content/Balance/Tasks/managingloadbalancer.htm?tocpath=Services%7CLoa The essential components for load balancing include:* A load balancer with pre-provisioned bandwidth.* A backend set with a health check policy. See Managing Backend Sets.* Backend servers for your backend set.
See Managing Backend Servers.* One or more listeners . See Managing Load Balancer Listeners.* Load balancer subnet security rules to allow the intended traffic. To learn more about these rules, see Security Rules.* Optionally, you can associate your listeners with SSL server certificate bundles to manage how your system handles SSL traffic. See Managing SSL Certificates.
NEW QUESTION 108
As the Cloud Architect for your company, you have been tasked with designing a high performance (HPC) cluster in Oracle Cloud Infrastructure (OCI). The following requirements have been defined:
The cluster must be a minimum of three nodes, but may increase to six nodes when demand requires.
The cluster must be resilient to any potential infrastructure failures.
To minimize latency, all nodes must be deployed within the same availability domain (AD).
Adding or replacing nodes within the cluster should take no more than 30 minutes.
Which two steps should be performed to satisfy these requirements in OCI? (Choose two.)
- A. Create a custom image of your HPC node compute instance. Launch new compute instances using this image to reduce provisioning time.
- B. Deploy the cluster in a single AD. Place each of the nodes in one of the three different fault domains in that AD.
- C. Deploy the cluster in a single AD with a shared file system that leverages the file storage service (FSS). Deploy a standby cluster in another AD and configure it to use the same shared file system.
- D. Deploy the cluster in a single AD. Place each of the nodes in a different virtual cloud network (VCN) subnet.
- E. Create a backup of your HPC node compute instance boot volume. Launch new compute instances directly from the backup reduce provisioning time.
Answer: A,B
Explanation:
A fault domain is a grouping of hardware and infrastructure within an availability domain. Each availability domain contains three fault domains. Fault domains provide anti-affinity: they let you distribute your instances so that the instances are not on the same physical hardware within a single availability domain. A hardware failure or Compute hardware maintenance event that affects one fault domain does not affect instances in other fault domains. In addition, the physical hardware in a fault domain has independent and redundant power supplies, which prevents a failure in the power supply hardware within one fault domain from affecting other fault domains.
To control the placement of your compute instances, bare metal DB system instances, or virtual machine DB system instances, you can optionally specify the fault domain for a new instance or instance pool at launch time. If you don't specify the fault domain, the system selects one for you. Oracle Cloud Infrastructure makes a best-effort anti-affinity placement across different fault domains, while optimizing for available capacity in the availability domain. To change the fault domain for an instance, terminate it and launch a new instance in the preferred fault domain.
Use fault domains to do the following things:
Protect against unexpected hardware failures or power supply failures.
Protect against planned outages because of Compute hardware maintenance.
NEW QUESTION 109
A company currently uses Microsoft Active Directory as its identity provider. The company recently subscribed to Oracle Cloud Infrastructure (OCI) to leverage the cloud platform for test and development. As the administrator, you configured the OCI tenancy to be federated with Microsoft Active Directory. Now you need to give access to developers so that they can start creating resources in their OCI accounts.
Which step will you perform to make sure you are not duplicating user creation inside of OCI tenancy?
- A. Create a group for developers on OCI and map the group to a similar group in Microsoft Active Directory during the federation process.
- B. Create a new user account in OCI for each user, and then create policies to provide access to developers.
- C. Create a single user account in OCI, and then create policies to provide access to developers to this single account.
- D. Create a group for developers on OCI, export all the developers from Microsoft Active Directory, and then import them into the Identity and Access Management (IAM) group.
Answer: A
Explanation:
Explanation
When working with your IdP, your administrator defines groups and assigns each user to one or more groups according to the type of access the user needs. Oracle Cloud Infrastructure also uses the concept of groups (in conjunction with IAM policies) to define the type of access a user has. As part of setting up the relationship with the IdP, your administrator can map each IdP group to a similarly defined IAM group, so that your company can re-use the IdP group definitions when authorizing user access to Oracle Cloud Infrastructure resources.
NEW QUESTION 110
Which two statements are true about adding secondary VNICs to an existing compute instance? (Choose two.)
- A. You can assign an Ephemeral Public IP to a secondary VNIC
- B. The primary and secondary VNIC association must be in the same availability domain
- C. The primary and secondary VNIC association can be in different virtual cloud networks (VCNs)
- D. You can remove the primary VNIC after the secondary VNIC's attachment is complete
Answer: B,C
Explanation:
Explanation
"You can add secondary VNICs to an instance after it's launched. Each secondary VNIC can be in a subnet in the same VCN as the primary VNIC, or in a different subnet that is either in the same VCN or a different one. However, all the VNICs must be in the same availability domain as the instance."
https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/managingVNICs.htm
NEW QUESTION 111
When terminating a compute instance, you want to preserve the boot volume and its data.
Which step will you need to perform?
- A. Disable the default option to delete the boot volume when terminating an instance.
- B. You cannot preserve the boot volume; it will always be deleted when you terminate the instance.
- C. Before terminating the instance, you must detach the boot volume.
- D. Reboot the instance first, and then terminate the instance.
Answer: A
Explanation:
Explanation
References: The dialog will show you when you terminate the instance. If you want to preserve the boot volume associated with the instance, uncheck Permanently delete the attached Boot Volume.
https://docs.cloud.oracle.com/iaas/Content/Compute/Tasks/terminatinginstance.htm
NEW QUESTION 112
Which two statements are true about the Oracle Cloud Infrastructure Object Storage Service? (Choose two.)
- A. Data is stored redundantly across multiple availability domains (ADs).
- B. Data is stored redundantly only in a single AD.
- C. It provides higher IOPS than Block Storage.
- D. It provides strong consistency.
- E. It can be directly attached or detached from a compute instance.
Answer: A,D
Explanation:
Explanation
STRONG CONSISTENCYWhen a read request is made, Object Storage always serves the most recent copy of the data that was written to the system.DURABILITYObject Storage is a regional service. Data is stored redundantly across multiple storage servers. Object Storage actively monitors data integrity using checksums and automatically detects and repairs corrupt data. Object Storage actively monitors and ensures data redundancy. If a redundancy loss is detected, Object Storage automatically creates more data copies. For more details about Object Storage durability, see the Oracle Cloud Infrastructure Object Storage FAQ.CUSTOM METADATAYou can define your own extensive metadata as key-value pairs for any purpose. For example, you can create descriptive tags for objects, retrieve those tags, and sort through the data. You can assign custom metadata to objects and buckets using the Oracle Cloud Infrastructure CLI or SDK. See Software Development Kits and Command Line Interface for details.ENCRYPTIONObject Storage employs 256-bit Advanced Encryption Standard (AES-256) to encrypt object data on the server. Each object is encrypted with its own key. Data encryption keys are encrypted with a master encryption key that is frequently rotated.
Encryption is enabled by default and cannot be turned off.
NEW QUESTION 113
Which statement is true regarding Autonomous Transaction Processing (ATP)?
- A. A database name cannot be used concurrently for both an Autonomous Data Warehouse (ADW) and an ATP database
- B. A maximum of 2 TB of storage can be enabled for an ATP database
- C. After terminating a database, the database name is available for immediate reuse
- D. A maximum of 8 cores can be enabled for an ATP database
Answer: A
Explanation:
Explanation
The database name must be unique among all Autonomous Data Warehouses and Autonomous Databases in your tenancy in the same region.
Terminating an Autonomous Transaction Processing database permanently deletes the instance and removes all automatic backups. You cannot recover a terminated database.
the maximum number of CPUs and maximum storage capacity that can be provisioned in Oracle Autonomous Database In the current release up to 128 CPUs and 128TB can be provisioned from the cloud console.
Customers requiring more resources need to call their Oracle account team
NEW QUESTION 114
You work for a health insurance company that stores a large number of patient health records in an Oracle Cloud Infrastructure (OCI) Object Storage bucket named "HealthRecords".
Each record needs to be securely stored for a period of 5 years for regulatory compliance purposes and cannot be modified, overwritten or deleted during this time period.
What can you do to meet this requirement?
- A. Enable versioning on the HealthRecords bucket.
- B. Create an OCI Object Storage time-bound Retention Rule on the HealthRecords bucket for five years.
Enable Retention Rule Lock on this bucket. - C. Enable encryption on the HealthRecords bucket using your own vault master encryption keys.
- D. Create an OCI Object Storage Lifecycle Policies rule to archive objects in the HealthRecords bucket for five years.
Answer: B
Explanation:
Explanation/Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/usingretentionrules.htm
NEW QUESTION 115
Which two statements are true about data guard service on DB Systems in Oracle Cloud Infrastructure (OCI)?
(Choose two.)
- A. Data guard configuration on the OCI is limited to one standby database per primary database
- B. Data guard implementation requires two DB Systems, one running the primary database on a virtual machine and the standby database running on bare metal
- C. Data guard implementation requires two DB Systems, one containing the primary database and one containing the standby database
- D. Data guard configuration on the OCI is limited to a virtual machine only
Answer: A,C
NEW QUESTION 116
You have setup your environment as shown below with the Mount Target "MT" successfully mounted on both compute instances CLIENT-X and CLIENT-Y.
For security reasons you want to control the access to the File System A in such a way that CLIENT-X has READ/WRITE and CLIENT-Y has READ only permission.
What you should do?
- A. Update the OS firewall in CLIENT-X to allow READ/WRITE access.
- B. Update the security list ONE to restrict CLIENT-Y access to read only.
- C. Update the security list TWO to restrict CLIENT-Y access to read-only.
- D. Update the mount target export options to restrict CLIENT-Y access to read-only.
Answer: B
NEW QUESTION 117
Which two statements are true about restoring a block volume from a manual or policy-based block volume backup? (Choose two.)
- A. It can be restored as a new volume to any AD across different regions
- B. It can be restored as a new volume to any AD in the same region
- C. It must be restored as a new volume to the same availability domain (AD) on which the original block volume backup resides
- D. It can be restored as new volumes with different sizes from the backups
Answer: B,D
Explanation:
Explanation
A - Backups are encrypted and stored in Oracle Cloud Infrastructure Object Storage, and can be restored as new volumes to any availability domain within the same region they are stored.
D- You can restore a block volume backup to a larger volume size. To do this, check Custom Block Volume Size (GB), and then specify the new size. You can only increase the size of the volume, you cannot decrease the size.
NEW QUESTION 118
Which two are NOT an image source when launching a new compute instance? (Choose two.)
- A. Object Storage
- B. boot volume
- C. custom image
- D. bare metal instance
Answer: A,D
NEW QUESTION 119
Which storage service is used on OCI for a Data Transfer Service job?
- A. An instance with enough storage to accommodate the job
- B. Block Volume
- C. A File System service instance
- D. An object bucket
Answer: D
Explanation:
Explanation
https://docs.cloud.oracle.com/en-us/iaas/Content/DataTransfer/Concepts/overview.htm
NEW QUESTION 120
Which statement is true about a pre-authenticated request in Oracle Cloud Infrastructure Object Storage?
- A. You can create a pre-authenticated request only for public buckets.
- B. You cannot extend the expiration date on a pre-authenticated request.
- C. You can create only 1, 000 pre-authenticated requests per bucket.
- D. You cannot retire a pre-authenticated request before it expires.
Answer: B
Explanation:
Explanation
https://docs.cloud.oracle.com/iaas/Content/Object/Tasks/usingpreauthenticatedrequests.htm You can create an unlimited number of pre-authenticated requests.
You can't edit a pre-authenticated request. If you want to change user access options in response to changing requirements, you must create a new preauthenticated request.
URL: https://docs.cloud.oracle.com/iaas/Content/Object/Tasks/managingbuckets.htm You can change a bucket's access from public to private or from private to public. Changing the type of access doesn't affect existing pre-authenticated requests. Existing pre-authenticated requests still work.
NEW QUESTION 121
You had an outage in your application caused by the loss of a shared volume provisioned by File Storage Service (FSS). At this point, you need to restore the data from a snapshot you created of the FSS.
What are the steps to restore the data?
- A. Open OCI Console, select File Storage Service, find the snapshot you created and click restore.
- B. Access the directory where the shared volume is mounted, then cd into .snapshot folder, find the snapshot folder you want to recover and use cp or rsync tool to copy the files to the original location.
- C. Open OCI Console, select File Storage Service, find the shared storage, then click on snapshot and restore.
- D. Access the directory, where you mounted the shared volume, then cd into .snapshot folder and find the snapshot folder you want to recover and rename that folder to the original folder name.
Answer: C
NEW QUESTION 122
You have a working application in the US East region. The app is a 3-tier app with a database backend - you take regular backups of the database into OCI Object Storage in the US East region. For Business continuity; you are leveraging OCI Object Storage cross-region copy feature to copy database backups to the US West region. Which of the following three steps do you need to execute to meet your requirement?
- A. Specify the bucket visibility for both the source and destination buckets
- B. Write an IAM policy and authorize the Object Storage service to manage objects on your behalf
- C. Choose an overwrite rule
- D. Provide an option to choose bulk copying of objects
- E. Provide a destination object name
- F. Specify an existing destination bucket
Answer: B,C,F
Explanation:
Explanation
You can copy objects to other buckets in the same region and to buckets in other regions.
You must have the required access to both the source and destination buckets when performing an object copy.
You must also have permissions to manage objects in the source and destination buckets.
Because Object Storage is a regional service, you must authorize the Object Storage service for each region carrying out copy operations on your behalf. For example, you might authorize the Object Storage service in region US East (Ashburn) to manage objects on your behalf. Once you authorize the Object Storage service, you can copy an object stored in a US East (Ashburn) bucket to a bucket in another region.
You can use overwrite rules to control the copying of objects based on their entity tag (ETag) values.
Specify an existing target bucket for the copy request. The copy operation does not automatically create buckets.
NEW QUESTION 123
Which two tagging related items are valid attributes that may be included in payload of an audit log event? (Choose two.)
- A. Default tags
- B. Tag variables
- C. Cost-tracking tags
- D. Free-form tags
- E. Defined tags
- F. Predefined values
Answer: D,E
Explanation:
Reference:
https://docs.cloud.oracle.com/en-us/iaas/Content/Audit/Reference/logeventreference.htm#payload
NEW QUESTION 124
Your company is moving an Internet-facing, 2-tier web application into Oracle Cloud Infrastructure. The application must have a highly available architecture.
Which two design options would you consider? (Choose two.)
- A. Configure a NAT instance in your Virtual Cloud Network (VCN). Create a route rule by using the private IP of the NAT instance as a route target for all the private subnets in your VCN.
- B. Place all web servers behind a public load balancer.
- C. Create an Internet Gateway and attach it to your VCN. Deploy public load balancer nodes into two Available Domains.
- D. Configure a Dynamic Route Gateway in your VCN and make it highly available.
Answer: B,C
NEW QUESTION 125
......
Dumps Brief Outline Of The 1Z0-1072-20 Exam: https://www.vceprep.com/1Z0-1072-20-latest-vce-prep.html