1z0-1072-22 practice test

1. Question 1 · 1

   You can attach resources to a Dynamic Routing Gateway (DRG). Select THREE of these resources. (Choose three.)

   Choose all answers that apply.

   • IPSec Tunnel
   • Subnet
   • VNIC
   • Remote Peering Connections
   • Local Peering Connection
   • Virtual Circuits

2. Question 2 · 1

   You have three compartments: ProjectA, ProjectB, and ProjectC. For each compartment, there is an admin group set up: A-Admins, B-Admins, and C-Admins. Each admin group has full access over their respective compartments as shown in the graphic below. Your organization has set up a tag namespace, EmployeeGroup.Role and all your admin groups are tagged with a value of 'Admin'. You want to set up a Test compartment for members of the three projects to share. You also need to provide admin access to all three of your existing admin groups. Which policy would you write to accomplish this task?

   Choose one answer.

   

   • Allow dynamic-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'
   • Allow all-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'
   • Allow group any-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'
   • Allow any user to manage all resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'

3. Question 3 · 1

   Which is NOT a valid action within the Oracle Cloud Infrastructure (OCI) Block Volume service?

   Choose one answer.

   • Cloning an existing volume to a new, larger volume.
   • Expanding an existing volume in place with offline resizing.
   • Restoring from a volume backup to a larger volume.
   • Attaching a block volume to an instance in a different availability domain.

4. Question 4 · 1

   Which of the following statements is true about cloning a volume in the Oracle Cloud Infrastructure (OCI) Block Volume service?

   Choose one answer.

   • You can change the block volume size when cloning a volume.
   • You need to detach a volume before cloning it.
   • Creating a clone takes longer than creating a backup of a volume.
   • You can clone a volume to another region.

5. Question 5 · 1

   Which TWO statements about the Oracle Cloud Infrastructure (OCI) File Storage Service are accurate? (Choose two.)

   Choose all answers that apply.

   • File systems use Oracle-managed keys by default.
   • Mount targets use Oracle-managed keys by default.
   • Customer can encrypt the communication to a mount target via export options.
   • Customer can encrypt data in their file system using their own Vault encryption key.
   • Communication with file systems in a mount target is encrypted via HTTPS.

6. Question 6 · 1

   Which TWO are key benefits of setting up Site-to-Site VPN on Oracle Cloud Infrastructure (OCI)? (Choose two.)

   Choose all answers that apply.

   • When setting up Site-to-Site VPN, it creates a private connection that provides consistent network experience.
   • When setting up Site-to-Site VPN, customers can expect bandwidth above 2 Gbps.
   • When setting up Site-to-Site VPN, OCI provisions redundant VPN tunnels.
   • When setting up Site-to-Site VPN, customers can configure it to use static or dynamic routing (BGP).

7. Question 7 · 1

   Which of the following is a valid RFC 1918 CIDR prefix that can be used for creating an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN)?

   Choose one answer.

   • 10.0.0.0/8
   • 0.0.0.0/0
   • 192.168.0.0/16
   • 189.215.154.89/32
   • 192.268.0.0/24
   • 172.16.0.0/12

8. Question 8 · 1

   Which is NOT a valid Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) approach?

   Choose one answer.

   • Ensure VCN CIDR prefix overlaps with other VCNs in your tenancy or with your organizations private IP network ranges.
   • Private subnets should ideally have individual route tables to control the flow of traffic within and outside of VCN.
   • Use OCI tags to tag VCN resources so that all resources follow organizational tagging/naming conventions.
   • Ensure not all IP addresses are allocated at once within a VCN or subnet; instead reserve some IP addresses for future use.

9. Question 9 · 1

   Which TWO statements are TRUE about Public IP addresses in Oracle Cloud Infrastructure (OCI)? (Choose two.)

   Choose all answers that apply.

   • By default, an instance in a public subnet has one primary public IP address.
   • You must use OCI provided public IP addresses. You cannot bring your own IP addresses to OCI.
   • You can assign a given instance multiple public IPs across one or more VNICs.
   • Public IP addresses can be ephemeral or reserved.

10. Question 10 · 1

    Which TWO statements are TRUE about Private IP addresses in Oracle Cloud Infrastructure (OCI)? (Choose two.)

    Choose all answers that apply.

    • Each VNIC can only have one private IP address.
    • A private IP can have an optional public IP assigned to it if it resides in a public subnet.
    • By default, the primary VNIC of an instance in a subnet has one primary private IP address and one secondary private IP address.
    • By default, the primary VNIC of an instance in a subnet has one primary private IP address.

11. Question 11 · 1

    Which statement is NOT correct regarding the Oracle Cloud Infrastructure (OI) File System snapshots?

    Choose one answer.

    • Even if nothing has changed within the file system since the last snapshot was taken, a new snapshot consumes more storage
    • Snapshots are a consistent, point-in-time view of your file systems
    • Snapshots are accessible under the root directory of the file system at .snapshot/name
    • Before you can clone a file system, at least one snapshot must exist for the file system

12. Question 12 · 1

    Which statement is NOT true about the Oracle Cloud Infrastructure (OCI) Object Storage service?

    Choose one answer.

    • Immutable option for data stored in Object Storage can be set via retention rules.
    • Object lifecycle rules can be used to either archive or delete objects.
    • Object Storage resources can be shared across tenancies.
    • Object Versioning is enabled at the namespace level.

13. Question 13 · 1

    As a solution architect, you are showcasing the Oracle Cloud Infrastructure (OCI) Object Storage feature about Object Versioning to a customer. Which statement is true regarding OCI Object Storage Versioning?

    Choose one answer.

    • A bucket that is Versioning-enabled can and will always have the latest version of the object in the bucket.
    • Objects are physically deleted from a bucket when versioning is enabled.
    • Object Versioning does not provide data protection against accidental or malicious object update, overwrite, or deletion.
    • Object Versioning is disabled on a bucket by default.

14. Question 14 · 1

    You have multiple applications running on a compute instance that generate a large amount of log files. You are required to retain these log files for a total of 60 days; at least 15 days on the boot volume, and an additional 45 days in any location. Which is the most cost-effective way to meet the 15-day boot volume retention requirement and the 60-day total retention requirement?

    Choose one answer.

    • Do not delete any logs but resize the boot volume of the instance every time additional space is needed.
    • Attach a block volume and use a script that moves log files older than 15 days to the new volume and deletes them completely after 60 days.
    • Create an Object Storage bucket and use a script that runs daily to move log files older than 15 days from the boot volume to the bucket. Create a lifecycle rule for the bucket to delete any logs over 60 days old.
    • Terminate the instance while preserving the boot volume. Create a new instance from the boot volume and select a DenseIO shape to take advantage of the local NVMe storage.

15. Question 15 · 1

    You want to create a policy to allow the NetworkAdmins group to manage Virtual Cloud Network (VCN) in compartment C. You want to attach this policy to the tenancy. The compartment hierarchy is shown below. Which policy statement can be used to accomplish this task?

    Choose one answer.

    

    • Allow group NetworkAdmins to manage virtual-network-family in compartment C
    • Allow group NetworkAdmins to manage virtual-network-family in compartment B:C
    • Allow group NetworkAdmins to manage virtual-network-family in tenancy
    • Allow group NetworkAdmins to manage virtual-network-family in compartment A:B:C

Paid access to all 38 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.