[2023] Pass Oracle 1z0-1067-22 Exam Updated 56 Questions [Q15-Q37]

NEW QUESTION 15
Your company hasrestructured its HR departments. As part of this change, you also need to re-organize compartments within Oracle Cloud Infrastructure (OCI) to align them to the company’s new organizational structure. The following change is required:

Compartment Team_xneeds to be moved under a new parent compartment, Project_B The tenancy has the following policies defined for compartments Project_A and Project_B: Policy1: Allow group G1 to manage instance-family in compartment HR:Project_A Policy2: Allow group G2 tomanage instance-family in compartment HR:Project_B Which two statements describe the impacts after the compartment Team_x is moved? (Choose two.)

Group G2 can now manage instance-families in compartment Project_B and compartment Team_X

Group G1 can now manage instance-families in compartment Project_A, compartment Project_B and compartment Team_X

Group G1 can now manage instance-families in compartment Project_A but not in compartment Team_x

Group G2 can now manage instance-families in compartment Project_A but not in compartment Team_x

Group G2 can now manage instance-families in compartment Project_B, compartment Project_A and compartment Team_X

NEW QUESTION 16
You have been asked to review a network design for Oracle Cloud Infrastructure (OCI) by a major client. The client’s IT team needs to provision two Virtual Cloud Networks (VCNs) for a major application. The application uses a large number of virtual machine instances. Additionally, in the future, a VCN peering will be required to allow connectivity between the VCNs.
Which of the following are valid IP ranges to consider? (Choose the best answer.)

10.0.0.0/30 and 192.168.0.0/30

10.0.0.0/8 and 11.0.0.0/8

10.0.8.0/21 and 10.0.16.0/22

10.0.0.0/16 and 10.0.64.0/24

NEW QUESTION 17
You are asked to implement the disaster recovery (DR) and business continuity requirements for Oracle Cloud Infrastructure (OCI) Block Volumes. Two OCI regions being used: a primary/source region and a DR/destination region. The requirements are:
* There should be a copy of data in the destination region to use if a region-wide disaster occurs in the source region
* Minimize costs
Which design will help you meet these requirements? (Choose the best answer.)

Clone block volumes. Use Object Storage lifecycle management to automatically move clone objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.

Clone block volumes. Copy block volume clonesfrom source region to destination region at regular intervals.

Back up block volumes. Copy block volume backups from source region to destination region at regular intervals.

Back up block volumes. Use Object Storage lifecycle management to automatically move backup objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.

NEW QUESTION 18
Your team implemented a SaaS application that requires a whole system deployment for each new customer.
The infrastructure provisioning is already automated via Terraform, and now you have been asked to develop an Ansible playbook to centralize configuration file management and deployment.
What is the most effective way to ensure your playbooks are utilizing up-to-date and accurate inventory?
(Choose the best answer.)

Export an inventory list from the Oracle Cloud Infrastructure Web console.

Export an inventory list using Terraform apply command.

Implement a Command Line Interface script to list all the resources and run it within Ansible to generate a dynamic inventory list.

Download the dynamic inventory script provided by Oracle Cloud Infrastructure and include it in the playbook invocation command.

NEW QUESTION 19
You have a 750 MIB file in an Oracle Cloud Infrastructure (OCI)Object Storage bucket. You want to download the file in multiple parts to speed up the download using the OCI CLI. You also want to configure each part size to be 128 MIB.
Which is the correct OCI CLI command for this operation? (Choose the best answer.)

oci os object get -ns my-namespace -bn my-bucket –name my-large-object — multipart-download-threshold 750 –parallel-download-count 128

oci os object download -ns my-namespace -bn my-bucket –name my-large-object — multipart-download-threshold 750 –parallel-download-count 128

oci os object download -ns my-namespace -bn my-bucket –name my-large-object — resume-put
–multipart-download-threshold 500 –part-size 128

oci os object get -ns my-namespace -bn my-bucket –name my-large-object
–multipart-download-threshold 500 –part-size 128

NEW QUESTION 20
Your deploymentplatform within Oracle Cloud Infrastructure (OCI) leverages a compute instance with multiple block volumes attached. There are multiple teams that use the same compute instance and have access to these block volumes. You want to ensure that no one accidentally deletes any of these block volumes. You have started to construct the following IAM policy but need to determine which permissions should be used.
allow group DeploymentUsers to manage volume-family where ANY
{ request.permission != <???>, request.permission != <???>, request.permission !=
<???> }
Which permissions can you use in place of <???> in this policy? (Choose the best answer.)

VOLUME_DELETE, VOLUME_ATTACHMENT_DELETE, VOLUME_BACKUP_DELETE

VOLUME_ERASE, VOLUME_ATTACHMENT_ERASE, VOLUME_BACKUP_ERASE

ERASE_VOLUME, ERASE_VOLUME_ATTACHMENT, ERASE_VOLUME_BACKUP

DELETE_VOLUME, DELETE_VOLUME_ATTACHMENT, DELETE_VOLUME_BACKUP

NEW QUESTION 21
Here is a partial code from a Terraform template written for Oracle Cloud Infrastructure (OCI):

What operation(s) does it perform? (Choose the best answer.)

Provides objectread and write access for an OCI Object Storage bucket.

Creates a pre-authenticated request for objects in an OCI Object Storage bucket.

Creates a URL to provide access to an OCI Object Storage bucket for managing objects.

Creates a lifecycle policy for an OCI Object Storage bucket for moving data to Archival storage at a specified time.

NEW QUESTION 22
You are asked to deploy a new application that has been designed to scale horizontally. The business stakeholders have asked that theapplication be deployed in us-phoenix-1.
Normal usage requires 2 OCPUs. You expect to have few spikes during the week, that will require up to 4 OCPUs, and a major usage uptick at the end of each month that will require 8 OCPUs.
What is the most cost-effective approach to implement a highly available and scalable solution? (Choose the best answer.)

Create an instance pool with a VM.Standard2.2 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances, to handle the weekly spikes, and a maximum of 4 instances.

Create an instance with 1 OCPU shape. Use the Resize Instance action to scale up to a larger shape when more resources are needed.

Create an instance with 1 OCPU shape.Use a CLI script to clone it when more resources are needed.

Create an instance pool with a VM.Standard2.1 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances and a maximum of 8 instances.

NEW QUESTION 23
You have set an alarm to be generated when the CPU usage of a specified instance is greater than 10%. In the alarm behavior view below you notice that the critical condition happened around 23:30. You were expecting a notification after 1 minute, however, the alarm firing state did not begin until 23:33.

What should you change to fix it? (Choose the best answer.)

Change the alarm’s metric interval to 1.

Change the alarm condition to be grater than 3%.

Change the notificationtopic that you previously associated with the alarm.

Change the alarm’s trigger delay minutes value to 1.

NEW QUESTION 24
You have been contracted by a local e-commerce company to assistwith enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet, and a database in a separate, private subnet.
The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically.
After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)

Create a load balancer policy in the Traffic Management service. Configure one answerfor each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.

Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A record. Inform customers to prepend the website URL with failover if the primary site is unavailable.

Create a failover policy in the Traffic Management service. Set the IP address of the public load balancerfor the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.

Deploy a new load balancer in the primary region. Create one backend set for theprimary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.

NEW QUESTION 25
Which technique does NOT help you get the optimal performance out of the Oracle Cloud Infrastructure (OCI) File Storage service? (Choose the best answer.)

Limit access to the same Availability Domain (AD) as the File Storageservice where possible.

Serialize operations to the file system to access consecutive blocks as much as possible.

Right size compute instances from where file system is accessed based on their network capacity.

Increase concurrency by using multiple threads, multiple clients, and multiple mount targets.

NEW QUESTION 26
Which option contains the essential components of the Oracle Cloud Infrastructure Notifications service?
(Choose the best answer.)

An ALARM with a name unique across the tenancy, a SUBSCRIPTION, and a METRIC with the measurement of interest.

A TOPIC with a name unique across the tenancy, a SUBSCRIPTION, and a MESSAGE where content is published.

A TOPIC with a name unique across the compartment, a SUBSCRIPTION, and a MESSAGE where content is published.

An ALARM with a name unique across thecompartment, a SUBSCRIPTION, and a METRIC with the measurement of interest.

NEW QUESTION 27
You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.

The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the computeinstance from the internet. However, you are not able to connect to the web server using your web browser.

Which step will resolve the issue? (Choose the best answer.)

In the route table, add a rule for your default traffic to be routed to NAT gateway.

In the security list, add an ingress rule for port 80 (http).

In the security list, remove the ssh rule.

In the route table, add a rule for your default traffic to be routed to service gateway.

NEW QUESTION 28
You created an Oracle Linux compute instance through the Oracle Cloud Infrastructure (OCI) management console then immediately realize you forgot toadd an SSH key file. You notice that OCI compute service provides instance console connections that supports adding SSH keys for a running instance. Hence, you created the console connection for your Linux server and activated it using the connection string provided.
However, now you get prompted for a username and password to login.
What option should you recommend to add the SSH key to your running instance, while minimizing the administrative overhead? (Choose the best answer.)

You need to configure the boot loader to use ttyS0 as a console terminal on the VM.

You need to terminate the running instance and recreate it by providing the SSH key file.

You need to reboot the instance from the console, boot into the bash shell in maintenance mode,and add SSH keys for the opc user.

You need to modify the serial console connection string to include the identity file flag, -i to specify the SSH key to use.

NEW QUESTION 29
You have recently been asked to take over management of your company’s infrastructure provisioning efforts, utilizing Terraform v0.12 to provision and manage infrastructure resources in Oracle Cloud Infrastructure (OCI). For the past fewdays the development environments have been failing to provision. Terraform returns the following error:

You locate the related code block in the Terraform config and find the following:

Which correction should you make to solve this issue? (Choosethe best answer.)

Place a command at the end of line 16

Modify line 15 to be the following:
tcp_options = {min = “22”, max = “22”)

Modify line 15 to be the following:
tcp_options { min = “22”
max = “22”
}

Replace the curly braces ‘{ }’ inlines 11 and 16 with square braces ‘[ ]’

NEW QUESTION 30
You have been asked to update the lifecycle policy for object storage using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI).
Which command can successfully update the policy? (Choose the bestanswer.)

oci os object-lifecycle-policy delete -ns <object_storage_namespace> -bn <bucket_name>

oci os object-lifecycle-policy put -ns <object_storage_namespace> -bn <bucket_name>

oci os object-lifecycle-policy put -ns <object_storage_namespace> -bn <bucket_name> – -items
<json_formatted_lifecycle_policy>

oci os object-lifecycle-policy get -ns <object_storage_namespace> -bn <bucket_name>

NEW QUESTION 31
An insurance company has contracted you to help automate their application business continuity plan. They have the application running in eu-frankfurt-1 asthe primary site and uk-london-1 as a disaster recovery site.
Normally they have a DNS A record associated with the IP address of the primary endpoint in eu-frankfurt-1.
In the event of a disaster, they use OCI DNS Zone Management to update the A record and replace it with the IP address of the endpoint in uk-londond-1.
How can you automate the failover process? (Choose the best answer.)

Create a Health Check that evaluates both regional endpoints. Create a Traffic Management Steering policy with Failover type and associate it with the Health Check.

Create a Traffic Management Steering policy with Load Balancer type and add both eu-frankfurt-1 and uk- london-1 endpoints. Attach the Traffic Management Steering policy to the A record.

Provision a Load Balancer in Frankfurt and associate it with the A record in DNS. Create a backend set with backend servers from both eu-frankfurt-1 and uk-london-1 regions.

Create a Traffic Management Steering policy and attach it to a backend servers from both eu-frankfurt-1 and uk-london-1 regions.

NEW QUESTION 32
You have been asked to investigate a potential security risk on your company’s Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking throughthe audit logs for suspicious activity.
How can you retrieve the audit logs using the OCI Command Line Interface (CLI)? (Choose the best answer.)

oci audit event list –end-time $end-time –compartment-id $compartment-id

oci audit event list –start-time $start-time –compartment-id $compartment-id

oci audit event list –start-time $start-time –end-time $end-time — compartment-id $compartment-id

oci audit event list –start-time $start-time –end-time $end-time –tenancy-id
$tenancy-id

NEW QUESTION 33
A developer has created a file system in Oracle Cloud Infrastructure (OCI) File Storage service. She launches an Oracle Linux compute instance and successfully mounts the file system from the instance.
She then tries writing to the file system from the compute instance using the following command:
touch /mnt/yourmountpoint/helloworld
But gets an error message:
touch: cannot touch’/mnt/yourmountpoint/helloworrld’: Permission denied Which is a reason for this error? (Choose the best answer.)

‘touch’ command is not available in Oracle Linux by default.

Service limits or quota for file system writes have been breached.

Useris not part of any OCI Identity and Access Management group with write permissions to File Storage service.

User is connecting as the default Oracle Linux user ‘opc’ instead of ‘root’ user.

NEW QUESTION 34
You have created a group for several auditors. You assign the following policies tothe group:

What actions are the auditors allowed to perform within your tenancy? (Choose the best answer.)

The Auditors can view resources in the tenancy.

Auditors are able to create new instances in the tenancy.

The Auditors are able to delete resource in the tenancy.

Auditors are able to view all resources in the compartment.

NEW QUESTION 35
You have been asked to set up connectivity between a client’s on-premises network and Oracle Cloud Infrastructure (OCI). The requirements are:
Low latency: The applications are financial and require low latency connectivity intoOCI. Consistency: The application isn’t tolerant of performance variation.
Performance: The communications link needs to support up to 1.25 Gbps.
Encryption: The communications link needs to encrypt any data in transit between the on-premises network and OCI Virtual Cloud Network (VCN).
The client wants to implement the above with as low a cost as possible, while meeting all of the requirements.
What should you suggest? (Choose the best answer.)

Provision FastConnect with a single private virtualcircuit, and run an IPsec VPN tunnel over the top of this virtual circuit.

Provision FastConnect with a single public virtual circuit.

Provision a site-to-site IPsec VPN between your on-premises network and your virtual cloud network (VCN) using VPNConnect.

Provision FastConnect with a single private virtual circuit.

Provision FastConnect with a single public virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.

NEW QUESTION 36
Recently, your e-commerce web application has been receiving significantly more traffic than usual. Users are reporting they often encounter a 503 Service Error when trying to access your site. Sometimes the site is very slow.
You check your instance pool configuration to confirm that the maximum number of instances is configured to allow 20 compute instances. Currently, 14 compute instances have been provisioned by the instance pool.
You also confirm that current CPU utilization across all hosts exceeds the scale-out threshold you set in your auto-scaling policy. However, the instance pool is not provisioning any newinstances.
What can you check to determine why the application is NOT functioning properly? (Choose the best answer.)

Verify that the new offer feature code did not introduce any performance bugs.

Verify that the database is accessible.

Verifythat the compute resource quota has not been exceeded.

Verify that the Quality Assurance team is not currently performing load-testing against production.

Leave a comment Cancel reply