1z0-1072-20 practice test

1. Question 1 · 1

   You have an Oracle Cloud Infrastructure (OCI) load balancer distributing traffic via an evenly-weighted round robin policy to your back-end web servers. You notice that one of your web servers is receiving more traffic than other web servers. How can you resolve this to make sure traffic is evenly distributed across all back-end webservers?

   Choose one answer.

   • Disable cookie-based session persistence on your backend set.
   • Change keep-alive setting between the load balancer and backend server.
   • Disable SSL configuration associated with your backend set.
   • Create separate listeners for each backend web server.

2. Question 2 · 1

   A financial firm is designing an application architecture for its online trading platform that must have high availability and fault tolerance. Their solutions architect configured the application to use an Oracle Cloud Infrastructure Object Storage bucket located in the US West (us-phoenix-1) region to store large amounts of financial data. The stored financial data in the bucket must not be affected even if there is an outage in one of the Availability Domains or a complete region. What should the architect do to avoid any costly service disruptions and ensure data durability?

   Choose one answer.

   • Create a new Object Storage bucket in another region and configure lifecycle policy to move data every 5 days.
   • Create a lifecycle policy to regularly send data from Standard to Archive storage.
   • Copy the Object Storage bucket to a block volume.
   • Create a replication policy to send data to a different bucket in another OCI region.

3. Question 3 · 1

   In Oracle Cloud Infrastructure Container Engine for Kubernetes (OKE), what does a Replica Set do?

   Choose one answer.

   • It provides declarative updates for Pods.
   • It maintains a stable set of replica Pods running at any given time.
   • It ensures that all Nodes run a copy of a Pod.
   • It exposes an application running on a set of Pods.

4. Question 4 · 1

   As a solution architect, you are showcasing the Oracle Cloud Infrastructure (OCI) Object Storage feature about Object Versioning to a customer. Which statement is true in regards to OCI Object Storage Versioning?

   Choose one answer.

   • Object versioning does not provide data protection against accidental or malicious object update, overwrite, or deletion.
   • By default, object versioning is disabled on a bucket.
   • A bucket that is versioning-enabled can have only and always will have a latest version of the object in the bucket.
   • Objects are physically deleted from a bucket when versioning is enabled.

5. Question 5 · 1

   You are designing a lab exercise with an application that includes a large number of graphics with large file sizes. The application becomes unresponsive if the graphics are embedded in the application. You have uploaded the graphics to Oracle Cloud Infrastructure Object Storage bucket and added the URL paths for the individual objects in the application. You need to ensure these graphics are accessible without requiring any authentication for an extended period of time. How can you achieve these requirements?

   Choose one answer.

   • Create pre-authenticated requests (PAR) and do not specify any expiration time.
   • Make the Object Storage bucket private, make all objects public, and use the URL found in the object "Details".
   • Make the Object Storage bucket public and use the URL path for the individual objects.
   • Create pre-authenticated requests (PAR) and specify 00:00:0000 as the expiration time.

6. Question 6 · 1

   You have setup your environment as shown below with the Mount Target "MT" successfully mounted on both compute instances CLIENT-X and CLIENT-Y. For security reasons you want to control the access to the File System A in such a way that CLIENT-X has READ/WRITE and CLIENT-Y has READ only permission. What you should do?

   Choose one answer.

   

   • Update the OS firewall in CLIENT-X to allow READ/WRITE access.
   • Update the security list TWO to restrict CLIENT-Y access to read-only.
   • Update the mount target export options to restrict CLIENT-Y access to read-only.
   • Update the security list ONE to restrict CLIENT-Y access to read only.

7. Question 7 · 1

   Which two methods are supported for migrating your on-premises Oracle database to an Oracle Autonomous Transaction Processing (ATP) database in Oracle Cloud Infrastructure? (Choose two.)

   Choose all answers that apply.

   • Load text files into ATP using SQL Developer.
   • Use RMAN duplicate.
   • Use Oracle Data Pump.
   • Transfer the physical database files and re-create the database.
   • Use database backup and restore.

8. Question 8 · 1

   You are running an online gaming application hosted on a VM.Standard2.1 instance shape in Oracle Cloud Infrastructure. As the game becomes popular, you identify network throughput as a bottleneck on your instance when uploading user data. Though you want to resolve the issue, you want to observe the demand for a week before adding new application instances. Which action is the most efficient way to resolve this issue?

   Choose one answer.

   • Add a secondary virtual network interface card (VNIC).
   • Change shape of the instance to a higher network bandwidth instance.
   • Delete the instance while preserving boot volume and spin up a new higher network bandwidth instance with this boot volume.
   • Change the performance tier of attached block volume to High Performance.

9. Question 9 · 1

   Which option is NOT a valid action within the Oracle Cloud Infrastructure (OCI) Block Volume service?

   Choose one answer.

   • Clone an existing volume to a new, larger volume.
   • Restore from a volume backup to a larger volume.
   • Shrink an existing volume in place with offline resizing.
   • Expand an existing volume in place with offline resizing.

10. Question 10 · 1

    You created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains a DB System. The application requires a shared file system so you have provisioned one using the file storage service (FSS). You also created the corresponding mount target in one of the application subnets. The VCN security lists are properly configured so that both application servers and the DB system can access the file system. The security team determines that the DB System should have read-only access to the file system. What change should you make to satisfy this requirement?

    Choose one answer.

    • Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet.
    • Modify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateless.
    • Create an instance principal for the DB System. Write an Identity and Access Management (IAM) policy that allows the instance principal read-only access to the file storage service.
    • Connect via SSH to one of the application servers where the file system has been mounted. Use the Unix command chmod to change permissions on the file system directory, allowing the database user read only access.

11. Question 11 · 1

    Your company uses the Oracle Cloud Infrastructure (OCI) Object Storage service to share large data sets with its data science team. The data science team consists of 20 people who work from offices in Washington, D.C., and Tokyo. While working in these offices, employees are assigned an IP address from the public IP range 129.146.31.0/27 Which two steps should you take to ensure that the Object Storage bucket used in this scenario was only accessible from these office locations? (Choose two.)

    Choose all answers that apply.

    • Write an IAM policy that includes the conditional statement where request.networkSource.name = CorpNet
    • Set the bucket visibility to public and only share the URL with the data science team via email
    • Create a pre-authenticated request for each data set and only share with the data science team via email
    • Create a Network Source named CorpNetwork with a CIDR block of 129.146.31.0/27
    • Create a Network Source named CorpNetwork with a CIDR block of 129.146.0.0/16
    • Write an IAM policy that includes the conditional statement where request.region = 129.146.31.0/27

12. Question 12 · 1

    Which two resources reside exclusively in a single Oracle Cloud Infrastructure Availability Domain? (Choose two.)

    Choose all answers that apply.

    • Identity and Access Management Groups
    • Object Storage
    • Web Application Firewall policy
    • Block volume
    • Compute instance

13. Question 13 · 1

    Your application front end consists of several Oracle Cloud Infrastructure compute instances behind a public load balancer. You have configured the load balancer to perform health checks on these instances. What will happen if an instance fails to pass the configured health checks?

    Choose one answer.

    • The instance is terminated automatically by the load balancer.
    • The load balancer stops sending traffic to that instance.
    • The instance is replaced automatically by the load balancer.
    • The instance is taken out of the backend set by the load balancer.

14. Question 14 · 1

    Your company has been running several small applications in Oracle Cloud Infrastructure and is planning a proof-of-concept (POC) to deploy Oracle PeopleSoft. If your existing resources are being maintained in the root compartment, what is the recommended approach for defining security for the upcoming POC?

    Choose one answer.

    • Create a new compartment for the POC and grant appropriate permissions to create and manage resources within the compartment.
    • Create a new tenancy for the POC and provision all new resources into the root compartment. Grant appropriate permissions to create and manage resources within the root compartment.
    • Provision all new resources into the root compartment. Use defined tags to separate resources that belong to different applications.
    • Provision all new resources into the root compartment. Grant permissions that only allow for creation and management of resources specific to the POC.

15. Question 15 · 1

    Which two statements about Oracle Cloud Infrastructure File Storage Service are accurate? (Choose two.)

    Choose all answers that apply.

    • Customer can encrypt the communication to a mount target via export options.
    • Mount targets use Oracle-managed keys by default.
    • File systems use Oracle-managed keys by default.
    • Customer can encrypt data in their file system using their own Vault encryption key.
    • Communication with file systems in a mount target is encrypted via HTTPS.

Paid access to all 33 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.