[Oct-2021] Valid Way To Pass Oracle Exam Dumps with 1Z0-1067-21 Exam Study Guide
All 1Z0-1067-21 Dumps and Oracle Cloud Infrastructure 2021 Cloud Operations Associate Training Courses Help candidates to study and pass the Exams hassle-free!
NEW QUESTION 12
Your application is using an Object Storage bucket named app-data in the namespace vision, to store both persistent and temporary dat a. Every week all the temporary data should be deleted to limit the storage consumption.
Currently you need to navigate to the Object Storage page using the web console, select the appropriate bucket to view all the objects and delete the temporary ones.
To simplify the task you have configured the application to save all the temporary data with /temp prefix. You have also decided to use the Command Line Interface (CLI) to perform this operation.
What is the command you should use to speed up the data cleanup? (Choose the best answer.)
- A. oci os object delete -ns vision -bn app-data --prefix /temp
- B. oci os object bulk-delete -ns vision -bn app-data --prefix /temp --force
- C. oci os object delete app-data in vision where prefix = /temp
- D. oci objectstorage bulk-delete -ns vision -bn app-data --prefix /temp --force
Answer: B
NEW QUESTION 13
You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG: NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:
However, after checking the bastion host logs, you discovered that there are IP addresses other than your own that can access your bastion host.
What is the root cause of this issue? (Choose the best answer.)
- A. The Security List allows access to all IP address which overrides the Network Security Group ingress rules.
- B. The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.
- C. All compute instances associated with NSG-050504 are also able to connect to the bastion host.
- D. A netmask of /32 allows all IP address in the 140.19.2.0 network, other than your IP 140.19.2.140
Answer: C
NEW QUESTION 14
Which two statements are TRUE about Object Storage data security and encryption in Oracle Cloud Infrastructure (OCI)? (Choose two.)
- A. A VPN connection to OCI is required to ensure secure data transfer to an object storage bucket.
- B. Data needs to be decrypted on the client side before retrieving it.
- C. OCI Vault Management is used by default to provide data security.
- D. Client-side encryption is managed by the customer.
- E. All traffic to and from Object Storage service is encrypted using TLS.
Answer: D,E
NEW QUESTION 15
You are asked to deploy a new application that has been designed to scale horizontally. The business stakeholders have asked that the application be deployed in us-phoenix-1.
Normal usage requires 2 OCPUs. You expect to have few spikes during the week, that will require up to 4 OCPUs, and a major usage uptick at the end of each month that will require 8 OCPUs.
What is the most cost-effective approach to implement a highly available and scalable solution? (Choose the best answer.)
- A. Create an instance with 1 OCPU shape. Use the Resize Instance action to scale up to a larger shape when more resources are needed.
- B. Create an instance pool with a VM.Standard2.1 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances and a maximum of 8 instances.
- C. Create an instance pool with a VM.Standard2.2 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances, to handle the weekly spikes, and a maximum of 4 instances.
- D. Create an instance with 1 OCPU shape. Use a CLI script to clone it when more resources are needed.
Answer: C
NEW QUESTION 16
Multiple teams are sharing a tenancy in Oracle Cloud Infrastructure (OCI). You are asked to figure out an appropriate method to manage OCI costs.
Which is NOT a valid technique to accurately attribute costs to resources used by each team? (Choose the best answer.)
- A. Create a Cost-Tracking tag. Apply this tag to all resources with team information. Use the OCI cost analysis tools to filter costs by tags.
- B. Define and use tags for resources used by each team. Analyze usage data from the OCI Usage Report which has detailed information about resources and tags.
- C. Create an Identity and Access Management (IAM) group for each team. Create an OCI budget for each group to track spending.
- D. Create separate compartment for each team. Use the OCI cost analysis tools to filter costs by compartment.
Answer: C
NEW QUESTION 17
You have been asked to review a network design for Oracle Cloud Infrastructure (OCI) by a major client. The client's IT team needs to provision two Virtual Cloud Networks (VCNs) for a major application. The application uses a large number of virtual machine instances. Additionally, in the future, a VCN peering will be required to allow connectivity between the VCNs.
Which of the following are valid IP ranges to consider? (Choose the best answer.)
- A. 10.0.0.0/8 and 11.0.0.0/8
- B. 10.0.8.0/21 and 10.0.16.0/22
- C. 10.0.0.0/16 and 10.0.64.0/24
- D. 10.0.0.0/30 and 192.168.0.0/30
Answer: C
NEW QUESTION 18
You are using the Oracle Cloud Infrastructure Command Line Interface to launch a Linux virtual machine. You enter the following command (with correct values for all parameters):
The command fails.
Which is NOT a valid parameter in this command? (Choose the best answer.)
- A. - -subnet-id <subnet_id>
- B. -t <tenancy_id>
- C. - -image-id <image_id>
- D. - -shape "<shape_name>"
- E. -c <compartment_id>
Answer: B
NEW QUESTION 19
You have received an email from your manager to provision new resources on Oracle Cloud Infrastructure (OCI). When researching OCI, you determined that you should use OCI Resource Manager. Since this is a task that will be done multiple times for development, test, and production. You will need to create a command that can be re-used.
Which CLI command can be used in this situation? (Choose the best answer.)
- A. oci resource-manager stack update --compartment-id <compartment_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name "Production stack build" \
--description Creating new Production environment - B. oci resource-manager stack create --tenancy-id <tenancy_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name Production stack build \
--description Creating new Production environment - C. oci resource-manager stack update --tenancy-id <tenancy_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name "Production stack build" \
--description Creating new Production environment - D. oci resource-manager stack create --compartment-id <compartment_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name Production stack build \
--description Creating new Production environment
Answer: D
NEW QUESTION 20
You have been asked to update the lifecycle policy for object storage using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI).
Which command can successfully update the policy? (Choose the best answer.)
- A. oci os object-lifecycle-policy delete -ns <object_storage_namespace> -bn <bucket_name>
- B. oci os object-lifecycle-policy put -ns <object_storage_namespace> -bn <bucket_name>
- C. oci os object-lifecycle-policy put -ns <object_storage_namespace> -bn <bucket_name> - -items
<json_formatted_lifecycle_policy> - D. oci os object-lifecycle-policy get -ns <object_storage_namespace> -bn <bucket_name>
Answer: C
NEW QUESTION 21
A subscriber of an Oracle Cloud Infrastructure (OCI) Notifications service topic complained about not receiving messages from the service.
Which option can help you debug this issue? (Choose the best answer.)
- A. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to one day. Make sure that the subscriber is online at least once a day to help debug the issue.
- B. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to two hours. Configure an alarm on the NumberOfNotificationFailed metric through the OCI Monitoring service to help debug the issue.
- C. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service drops the message. Confirm that the subscriber is always online to receive messages to help debug the issue.
- D. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, check the NumberOfNotificationFailed metric through the OCI Monitoring service for failed messages. Copy these messages to an OCI Object Storage bucket. Make sure the subscriber has the required credentials to access this bucket to help debug the issue.
Answer: B
NEW QUESTION 22
You run a large global application with 90% of customers based in the US and Canad a. You want to be able to test a new feature and allow a small percentage of users to access the new version of your application.
What Oracle Cloud Infrastructure Traffic Management steering policy should you utilize? (Choose the best answer.)
- A. IP Prefix steering
- B. Load Balancer
- C. ASN steering
- D. Geolocation steering
Answer: D
NEW QUESTION 23
You are asked to implement the disaster recovery (DR) and business continuity requirements for Oracle Cloud Infrastructure (OCI) Block Volumes. Two OCI regions being used: a primary/source region and a DR/ destination region. The requirements are:
There should be a copy of data in the destination region to use if a region-wide disaster occurs in the source region Minimize costs Which design will help you meet these requirements? (Choose the best answer.)
- A. Clone block volumes. Use Object Storage lifecycle management to automatically move clone objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.
- B. Back up block volumes. Use Object Storage lifecycle management to automatically move backup objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.
- C. Clone block volumes. Copy block volume clones from source region to destination region at regular intervals.
- D. Back up block volumes. Copy block volume backups from source region to destination region at regular intervals.
Answer: B
NEW QUESTION 24
You have a web application running on Oracle Cloud Infrastructure (OCI) that lets users log in with a username and password. You notice that an attacker has tried to use SQL comment "--" to alter the database query, remove the password check and log in as a user. You decide to prevent any future attacks.
Which of the following OCI services or features would you choose to safeguard your application? (Choose the best answer.)
- A. Network Security Group
- B. Web Application Framework (WAF)
- C. Vault
- D. Data Safe
Answer: C
NEW QUESTION 25
A developer has created a file system in Oracle Cloud Infrastructure (OCI) File Storage service. She launches an Oracle Linux compute instance and successfully mounts the file system from the instance.
She then tries writing to the file system from the compute instance using the following command:
touch /mnt/yourmountpoint/helloworld
But gets an error message:
touch: cannot touch '/mnt/yourmountpoint/helloworrld': Permission denied Which is a reason for this error? (Choose the best answer.)
- A. User is not part of any OCI Identity and Access Management group with write permissions to File Storage service.
- B. 'touch' command is not available in Oracle Linux by default.
- C. User is connecting as the default Oracle Linux user 'opc' instead of 'root' user.
- D. Service limits or quota for file system writes have been breached.
Answer: A
NEW QUESTION 26
Recently, your e-commerce web application has been receiving significantly more traffic than usual. Users are reporting they often encounter a 503 Service Error when trying to access your site. Sometimes the site is very slow.
You check your instance pool configuration to confirm that the maximum number of instances is configured to allow 20 compute instances. Currently, 14 compute instances have been provisioned by the instance pool.
You also confirm that current CPU utilization across all hosts exceeds the scale-out threshold you set in your auto-scaling policy. However, the instance pool is not provisioning any new instances.
What can you check to determine why the application is NOT functioning properly? (Choose the best answer.)
- A. Verify that the new offer feature code did not introduce any performance bugs.
- B. Verify that the Quality Assurance team is not currently performing load-testing against production.
- C. Verify that the compute resource quota has not been exceeded.
- D. Verify that the database is accessible.
Answer: C
NEW QUESTION 27
......
Get Latest [Oct-2021] Conduct effective penetration tests using SureTorrent 1Z0-1067-21