1z0-1072-23 practice test

1. Question 1 · 1

   You create a file system and then add a 2 GB file. You then take a snapshot of the file system. What would be the total meteredBytes shown by the File Storage service after the hourly update cycle is complete?

   Choose one answer.

   • 2 GB
   • 2.5 GB
   • 3 GB
   • 4 GB

2. Question 2 · 1

   Which TWO statements are TRUE about Private IP addresses in Oracle Cloud Infrastructure (OCI)? (Choose two.)

   Choose all answers that apply.

   • By default, the primary VNIC of an instance in a subnet has one primary private IP address and one secondary private IP address.
   • Each VNIC can only have one private IP address.
   • A private IP can have an optional public IP assigned to it if it resides in a public subnet.
   • By default, the primary VNIC of an instance in a subnet has one primary private IP address.

3. Question 3 · 1

   You have a block volume created in the US West (Phoenix) region. You enabled Cross Region Replication for the volume and selected US West (San Jose) as the destination region. Now, you would like to create a new volume from the volume replica in the US West (San Jose) region. What should you do?

   Choose one answer.

   • Initiate the replica.
   • Activate the replica.
   • No action required. By default, the replica is available as a block volume.
   • Trigger the replica.

4. Question 4 · 1

   Which THREE capabilities are available with the Oracle Cloud Infrastructure (OCI) DNS service? (Choose three.)

   Choose all answers that apply.

   • Creating and managing Web Application Firewall (WAF) rules
   • Creating and managing Identity Access Management (IAM) polices
   • Viewing all zones
   • Creating and managing records
   • Creating and managing security lists
   • Creating and managing zones

5. Question 5 · 1

   Which statement is TRUE about delegating an existing domain to the Oracle Cloud Infrastructure (OCI) DNS service?

   Choose one answer.

   • Domains can be delegated to OCI DNS via FastConnect partners.
   • All domains can be retrieved to OCI DNS via DYN.
   • Domains can be delegated to OCI DNS from the OCI Marketplace.
   • Domains can be self-delegated to OCI DNS from its own service portal.
   • Domains can be delegated to OCI DNS from the Domain Registrar's self-service portal.

6. Question 6 · 1

   You are part of an organization with thousands of users accessing Oracle Cloud Infrastructure (OCI). An unknown user action was executed resulting in configuration errors. You are tasked to quickly identify the details of all users who were active in the last six hours along with any REST API calls that were executed. Which OCI service would you use?

   Choose one answer.

   • Logging
   • Notifications
   • Management Agent
   • Audit
   • Service Connectors

7. Question 7 · 1

   Which is NOT a valid statement regarding the Oracle Cloud Infrastructure (OCI) Audit service?

   Choose one answer.

   • Retention period for Audit logs is 365 days and it cannot be changed.
   • Audit logs are displayed for Compartments.
   • Audit service can record REST API calls executed by a custom client.
   • Changes within the objects stored in an Object Storage bucket are collected as Audit logs.

8. Question 8 · 1

   In which TWO ways does Cloud Guard help improve the overall security posture for your tenancy? (Choose two.)

   Choose all answers that apply.

   • Allows you to centrally manage encryption keys.
   • Monitors unauthorized or suspicious user activity.
   • Helps detect misconfigured resources, such as publicly accessible Object Storage buckets, instances, and restricted ports on security lists.
   • Prevents you from creating misconfigurations on your resources in Oracle Cloud Infrastructure (OCI).
   • Masks sensitive data and monitors security controls on your Oracle databases.

9. Question 9 · 1

   A few Object Storage buckets in your Oracle Cloud Infrastructure (OCI) tenancy should remain public, and yet you do not want the Cloud Guard service to detect these as problems. In which TWO ways would you address this requirement? (Choose two.)

   Choose all answers that apply.

   • Cloud Guard will keep detecting it because a public bucket is a security risk.
   • Dismiss the problems associated with those resources.
   • Fix the base line by configuring Conditional Groups for the detector.
   • Resolve or remediate those problems and you should not see Cloud Guard triggering on these resources ever again.

10. Question 10 · 1

    You want to distribute DNS traffic to different endpoints based on the location of the end user. Which Traffic Management Steering Policy would you use?

    Choose one answer.

    • Geolocation
    • IP Prefix
    • Failover
    • Load Balancer

11. Question 11 · 1

    Which is NOT a valid action within the Oracle Cloud Infrastructure (OCI) Block Volume service?

    Choose one answer.

    • Expanding an existing volume in place with offline resizing.
    • Restoring from a volume backup to a larger volume.
    • Cloning an existing volume to a new, larger volume.
    • Attaching a block volume to an instance in a different availability domain.

12. Question 12 · 1

    You are in the process of migrating several legacy applications from on-premises to Oracle Cloud Infrastructure (OCI). The current servers are already virtualized. However, you notice that the version of CentOS currently running does not align with any of the Oracle-provided compute images. How would you migrate your existing virtual server images to OCI?

    Choose one answer.

    • Export your current image in the VDI format and copy to an Object Storage bucket. Import it as a custom image. Select native mode to ensure the best possible performance.
    • Export your current image in the VMDK format and copy to an Object Storage bucket. Import it as a custom image. Select native mode to ensure the best possible performance.
    • Export your current image in the QED format and copy to an Object Storage bucket. Import it as a custom image. Select emulated mode to ensure compatibility with legacy drivers.
    • Export your current image in the QCOW2 format and copy to an Object Storage bucket. Import it as a custom image. Select emulated mode to ensure compatibility with legacy drivers.

13. Question 13 · 1

    You are a system administrator of your company and you are managing a complex environment consisting of compute instances running Oracle Linux on Oracle Cloud Infrastructure (OCI). It’s your task to apply all the latest kernel security updates to all instances. Which OCI service will allow you to complete this task?

    Choose one answer.

    • OCI Security Zones
    • OS Management service
    • OCI Registry
    • OCI Streaming service

14. Question 14 · 1

    You have three compartments: ProjectA, ProjectB, and ProjectC. For each compartment, there is an admin group set up: A-Admins, B-Admins, and C-Admins. Each admin group has full access over their respective compartments as shown in the graphic below. Your organization has set up a tag namespace, EmployeeGroup.Role and all your admin groups are tagged with a value of 'Admin'. You want to set up a Test compartment for members of the three projects to share. You also need to provide admin access to all three of your existing admin groups. Which policy would you write to accomplish this task?

    Choose one answer.

    

    • Allow all-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'
    • Allow dynamic-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'
    • Allow any-user to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'
    • Allow group any-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'

15. Question 15 · 1

    You need to set up instance principals so that an application running on an instance can call Oracle Cloud Infrastructure (OCI) public services, without the need to configure user credentials or a configuration file. A developer in your team has already configured the application built using an OCI SDK to authenticate using the instance principals provider. Which is NOT a necessary step to complete this set up?

    Choose one answer.

    • Create a policy granting permissions to the dynamic group to access services in your compartment or tenancy.
    • Generate Auth Tokens to enable instances in the dynamic group to authenticate with APIs.
    • Create a dynamic group with matching rules to specify which instances can make API calls against services.
    • Deploy the application and the SDK to all the instances that belong to the dynamic group.

Paid access to all 55 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.