1z0-1067-21 practice test

1. Question 1 · 1

   You have been asked to ensure that in-transit communication between an Oracle Cloud Infrastructure (OCI) compute instance and an on-premises server (192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a Dynamic IPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added. What solution should you recommend? (Choose the best answer.)

   Choose one answer.

   • The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.
   • Advertise a 192.168.10.10/32 route over the VPN.
   • Advertise a 192.168.10.10/32 router over the FastConnect.
   • The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.

2. Question 2 · 1

   Which two statements about the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI) are TRUE? (Choose two.)

   Choose all answers that apply.

   • You can run CLI commands from inside OCI Regions only.
   • You can filter CLI output using the JMESPath query option for JSON.
   • The CLI provides an automatic way to connect with instances provisioned on OCI.
   • The CLI allows you to use the Python language to interact with OCI APIs.
   • The CLI provides the same core functionality as the Console, plus additional commands.

3. Question 3 · 1

   You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule. The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the compute instance from the internet. However, you are not able to connect to the web server using your web browser. Which step will resolve the issue? (Choose the best answer.)

   Choose one answer.

   

   

   • In the route table, add a rule for your default traffic to be routed to NAT gateway.
   • In the security list, add an ingress rule for port 80 (http).
   • In the security list, remove the ssh rule.
   • In the route table, add a rule for your default traffic to be routed to service gateway.

4. Question 4 · 1

   Your company recently adopted a hybrid cloud architecture which requires them to migrate some of their on-premises web applications to Oracle Cloud Infrastructure (OCI). You created a Terraform template which automatically provisions OCI resources such as compute instances, load balancer, and a database instance. After running the stack using the terraform apply command, it successfully launched the compute instances and the load balancer, but it failed to create a new database instance with the following error: Service error: NotAuthorizedOrNotFound. shape VM.Standard2.4 not found. http status code: 404 You discovered that the resource quotas assigned to your compartment prevent you from using VM.Standard2.4 instance shapes available in your tenancy. You edit the Terraform script and replace the shape with VM.Standard2.2 Which option would you recommend to re-run the terraform command to have required OCI resources provisioned with the least effort? (Choose the best answer.)

   Choose one answer.

   • terraform plan ג€"target=oci_database_db_system.db_system
   • terraform apply ג€"auto-approve
   • terraform refresh ג€"target=oci_database_db_system.db_system
   • terraform apply ג€"target=oci_database_db_system.db_system

5. Question 5 · 1

   You have been monitoring your company's applications running in Oracle Cloud Infrastructure (OCI) and notice that the application is using OCI Traffic Management service. This service uses a traffic steering policy to distribute the DNS traffic based on subnet addresses in a rule set. Which steering policy is in use in this particular case? (Choose the best answer.)

   Choose one answer.

   • Load Balancing policy
   • Geolocation steering
   • ASN steering policy
   • IP Prefix steering

6. Question 6 · 1

   You have the following compartment structure within your company's Oracle Cloud Infrastructure (OCI) tenancy: You want to create a policy in the root compartment to allow SystemAdmins to manage VCNs only in CompartmentC. Which policy is correct? (Choose the best answer.)

   Choose one answer.

   

   • Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentB:CompartmentC
   • Allow group SystemAdmins to manage virtual-network-family in compartment Root
   • Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentA:CompartmentB:CompartmentC
   • Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentC

7. Question 7 · 1

   Which option contains the essential components of the Oracle Cloud Infrastructure Notifications service? (Choose the best answer.)

   Choose one answer.

   • An ALARM with a name unique across the tenancy, a SUBSCRIPTION, and a METRIC with the measurement of interest.
   • A TOPIC with a name unique across the tenancy, a SUBSCRIPTION, and a MESSAGE where content is published.
   • A TOPIC with a name unique across the compartment, a SUBSCRIPTION, and a MESSAGE where content is published.
   • An ALARM with a name unique across the compartment, a SUBSCRIPTION, and a METRIC with the measurement of interest.

8. Question 8 · 1

   Which two statements are TRUE about Object Storage data security and encryption in Oracle Cloud Infrastructure (OCI)? (Choose two.)

   Choose all answers that apply.

   • Client-side encryption is managed by the customer.
   • Data needs to be decrypted on the client side before retrieving it.
   • OCI Vault Management is used by default to provide data security.
   • All traffic to and from Object Storage service is encrypted using TLS.
   • A VPN connection to OCI is required to ensure secure data transfer to an object storage bucket.

9. Question 9 · 1

   You are using Oracle Cloud Infrastructure (OCI) console to set up an alarm on a budget to track your OCI spending. Which two are valid targets for creating a budget in OCI? (Choose two.)

   Choose all answers that apply.

   • Select group as the type of target for your budget.
   • Select Tenancy as the type of target for your budget.
   • Select user as the type of target for your budget.
   • Select Cost-Tracking Tags as the type of target for your budget.
   • Select Compartment as the type of target for your budget.

10. Question 10 · 1

    Your application is using an Object Storage bucket named app-data in the namespace vision, to store both persistent and temporary data. Every week all the temporary data should be deleted to limit the storage consumption. Currently you need to navigate to the Object Storage page using the web console, select the appropriate bucket to view all the objects and delete the temporary ones. To simplify the task you have configured the application to save all the temporary data with /temp prefix. You have also decided to use the Command Line Interface (CLI) to perform this operation. What is the command you should use to speed up the data cleanup? (Choose the best answer.)

    Choose one answer.

    • oci os object delete ג€"ns vision ג€"bn appג€"data ג€"ג€"prefix /temp
    • oci os object bulk-delete ג€"ns vision ג€"bn appג€"data ג€"ג€"prefix /temp ג€"ג€"force
    • oci objectstorage bulkג€"delete ג€"ns vision ג€"bn appג€"data ג€"ג€"prefix /temp ג€"ג€"force
    • oci os object delete app-data in vision where prefix = /temp

11. Question 11 · 1

    You have created a group for several auditors. You assign the following policies to the group: What actions are the auditors allowed to perform within your tenancy? (Choose the best answer.)

    Choose one answer.

    

    • The Auditors can view resources in the tenancy.
    • Auditors are able to create new instances in the tenancy.
    • The Auditors are able to delete resource in the tenancy.
    • Auditors are able to view all resources in the compartment.

12. Question 12 · 1

    Your company has restructured its HR departments. As part of this change, you also need to re-organize compartments within Oracle Cloud Infrastructure (OCI) to align them to the company's new organizational structure. The following change is required: Compartment Team_x needs to be moved under a new parent compartment, Project_B The tenancy has the following policies defined for compartments Project_A and Project_B: Policy1: Allow group G1 to manage instance-family in compartment HR:Project_A Policy2: Allow group G2 to manage instance-family in compartment HR:Project_B Which two statements describe the impacts after the compartment Team_x is moved? (Choose two.)

    Choose all answers that apply.

    

    • Group G2 can now manage instance-families in compartment Project_B and compartment Team_X
    • Group G1 can now manage instance-families in compartment Project_A, compartment Project_B and compartment Team_X
    • Group G1 can now manage instance-families in compartment Project_A but not in compartment Team_x
    • Group G2 can now manage instance-families in compartment Project_A but not in compartment Team_x
    • Group G2 can now manage instance-families in compartment Project_B, compartment Project_A and compartment Team_X

13. Question 13 · 1

    You have been contracted by a local e-commerce company to assist with enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet, and a database in a separate, private subnet. The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically. After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)

    Choose one answer.

    • Create a load balancer policy in the Traffic Management service. Configure one answer for each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.
    • Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A record. Inform customers to prepend the website URL with failover if the primary site is unavailable.
    • Create a failover policy in the Traffic Management service. Set the IP address of the public load balancer for the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.
    • Deploy a new load balancer in the primary region. Create one backend set for the primary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.

14. Question 14 · 1

    You have recently been asked to take over management of your company's infrastructure provisioning efforts, utilizing Terraform v0.12 to provision and manage infrastructure resources in Oracle Cloud Infrastructure (OCI). For the past few days the development environments have been failing to provision. Terraform returns the following error: You locate the related code block in the Terraform config and find the following: Which correction should you make to solve this issue? (Choose the best answer.)

    Choose one answer.

    

    

    • Place a command at the end of line 16
    • Modify line 15 to be the following: tcp_options = {min = ג€22ג€, max = ג€22ג€)
    • Modify line 15 to be the following: tcp_options { min = ג€22ג€ max = ג€22ג€ }
    • Replace the curly braces '{ }' in lines 11 and 16 with square braces '[ ]'

15. Question 15 · 1

    Your customer is running a set of compute instances inside a private subnet to manage their workloads on Oracle Cloud Infrastructure (OCI) tenancy. You have set up auto scaling feature to provide consistent performance to their end users during period of high demand. Which step should be met for auto scaling to work? (Choose the best answer.)

    Choose one answer.

    • OS Management Service agent (osms) must be installed on the instances.
    • Audit logs for the instances should be enabled.
    • Service gateway should be setup to allow instances to send metrics to monitoring service.
    • Monitoring for the instances should not be enabled.

Paid access to all 38 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.