1Z0-1067-21 Actual Questions - Instant Download Tests Free Updated Today!
Get instant access of 100% real Oracle 1Z0-1067-21 exam questions with verified answers
Oracle 1Z0-1067-21 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
NEW QUESTION 27
You have been asked to set up connectivity between a client's on-premises network and Oracle Cloud Infrastructure (OCI). The requirements are:
* Low latency: The applications are financial and require low latency connectivity into OCI.
* Consistency: The application isn't tolerant of performance variation.
* Performance: The communications link needs to support up to 1.25 Gbps.
* Encryption: The communications link needs to encrypt any data in transit between the on-premises network and OCI Virtual Cloud Network (VCN).
The client wants to implement the above with as low a cost as possible, while meeting all of the requirements.
What should you suggest? (Choose the best answer.)
- A. Provision FastConnect with a single private virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.
- B. Provision FastConnect with a single public virtual circuit.
- C. Provision FastConnect with a single private virtual circuit.
- D. Provision a site-to-site IPsec VPN between your on-premises network and your virtual cloud network (VCN) using VPN Connect.
- E. Provision FastConnect with a single public virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.
Answer: C
Explanation:
Explanation/Reference: https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/fastconnectoverview.htm
NEW QUESTION 28
You are asked to deploy a new application that has been designed to scale horizontally. The business stakeholders have asked that the application be deployed in us-phoenix-1.
Normal usage requires 2 OCPUs. You expect to have few spikes during the week, that will require up to 4 OCPUs, and a major usage uptick at the end of each month that will require 8 OCPUs.
What is the most cost-effective approach to implement a highly available and scalable solution? (Choose the best answer.)
- A. Create an instance with 1 OCPU shape. Use the Resize Instance action to scale up to a larger shape when more resources are needed.
- B. Create an instance pool with a VM.Standard2.2 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances, to handle the weekly spikes, and a maximum of 4 instances.
- C. Create an instance pool with a VM.Standard2.1 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances and a maximum of 8 instances.
- D. Create an instance with 1 OCPU shape. Use a CLI script to clone it when more resources are needed.
Answer: C
NEW QUESTION 29
A developer has created a file system in Oracle Cloud Infrastructure (OCI) File Storage service. She launches an Oracle Linux compute instance and successfully mounts the file system from the instance.
She then tries writing to the file system from the compute instance using the following command:
touch /mnt/yourmountpoint/helloworld
But gets an error message:
touch: cannot touch '/mnt/yourmountpoint/helloworrld': Permission denied Which is a reason for this error? (Choose the best answer.)
- A. 'touch' command is not available in Oracle Linux by default.
- B. Service limits or quota for file system writes have been breached.
- C. User is connecting as the default Oracle Linux user 'opc' instead of 'root' user.
- D. User is not part of any OCI Identity and Access Management group with write permissions to File Storage service.
Answer: D
Explanation:
Explanation/Reference: https://itectec.com/unixlinux/touch-cannot-touch-test-permission-denied/
NEW QUESTION 30
Here is a partial code from a Terraform template written for Oracle Cloud Infrastructure (OCI):
What operation(s) does it perform? (Choose the best answer.)
- A. Creates a pre-authenticated request for objects in an OCI Object Storage bucket.
- B. Provides object read and write access for an OCI Object Storage bucket.
- C. Creates a lifecycle policy for an OCI Object Storage bucket for moving data to Archival storage at a specified time.
- D. Creates a URL to provide access to an OCI Object Storage bucket for managing objects.
Answer: B
NEW QUESTION 31
One of the compute instances that you have deployed on Oracle Cloud Infrastructure (OCI) is malfunctioning.
You have created a console connection to remotely troubleshoot it.
Which two statements about console connections are TRUE? (Choose two.)
- A. It is not possible to use VNC console connections to connect to Bare Metal Instances.
- B. It is not possible to connect to the serial console to an instance running Microsoft Windows, however VNC console connection can be used.
- C. For security purpose, the console connection will not let you edit system configuration files.
- D. VNC console connection uses SSH port forwarding to create a secure connection from your local system to the VNC server attached to your instance's console.
- E. If you do not disconnect from the session, your serial console connection will automatically be terminated after 24 hours.
Answer: D,E
NEW QUESTION 32
You have a 750 MIB file in an Oracle Cloud Infrastructure (OCI) Object Storage bucket. You want to download the file in multiple parts to speed up the download using the OCI CLI. You also want to configure each part size to be 128 MIB.
Which is the correct OCI CLI command for this operation? (Choose the best answer.)
- A. oci os object get -ns my-namespace -bn my-bucket --name my-large-object -- multipart-download-threshold 500 --part-size 128
- B. oci os object get -ns my-namespace -bn my-bucket --name my-large-object -- multipart-download-threshold 750 --parallel-download-count 128
- C. oci os object download -ns my-namespace -bn my-bucket --name my-large-object -- multipart-download-threshold 750 --parallel-download-count 128
- D. oci os object download -ns my-namespace -bn my-bucket --name my-large-object -- resume-put --multipart-download-threshold 500 --part-size 128
Answer: A
Explanation:
https://docs.public.oneportal.content.oci.oraclecloud.com/en-us/iaas/Content/API/SDKDocs/cliusing.htm
https://docs.oracle.com/en-us/iaas/tools/oci-cli/2.6.15/oci_cli_docs/cmdref/os/object/get.html
NEW QUESTION 33
You have been asked to ensure that in-transit communication between an Oracle Cloud Infrastructure (OCI) compute instance and an on-premises server (192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a Dynamic IPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added.
What solution should you recommend? (Choose the best answer.)
- A. The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.
- B. Advertise a 192.168.10.10/32 router over the FastConnect.
- C. The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.
- D. Advertise a 192.168.10.10/32 route over the VPN.
Answer: D
Explanation:
https://www.oracle.com/uk/cloud/networking/fastconnect-faq.html
NEW QUESTION 34
You have created a group for several auditors. You assign the following policies to the group:
What actions are the auditors allowed to perform within your tenancy? (Choose the best answer.)
- A. The Auditors are able to delete resource in the tenancy.
- B. Auditors are able to create new instances in the tenancy.
- C. The Auditors can view resources in the tenancy.
- D. Auditors are able to view all resources in the compartment.
Answer: D
NEW QUESTION 35
You have created an Autonomous Data Warehouse (ADW) service in your company's Oracle Cloud Infrastructure (OCI) tenancy and you now have to load historical data into it. You have already extracted this historical data from multiple data marts and data warehouses. This data is stored in multiple CSV text files and these files are ranging in size from 25 MB to 20 GB.
Which is the most efficient and error tolerant method for loading data into ADW? (Choose the best answer.)
- A. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using the web console upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA for each CSV file to copy the contents into the corresponding ADW database table.
- B. Create the tables in the ADW database and then execute SQL*Loader for each CSV file to load the contents into the corresponding ADW database table.
- C. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA for each CSV file to copy the contents into the corresponding ADW database table.
- D. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute Data Pump Import for each CSV file to copy the contents into the corresponding ADW database table.
Answer: C
Explanation:
Using Object Storage and COPY_DATA is the standard recommended method for fetching data into ADW. Furthermore using CLI over web has the benefit of multipart upload, that is chunk upload of large files, thus reducing the chance of a transfer failure
NEW QUESTION 36
You are working with Terraform on your laptop and have been tasked with spinning up multiple compute instances in Oracle Cloud Infrastructure (OCI) for a project. In addition, you are also required to collect IP addresses of provisioned instances and write them to a file and save it in your laptop.
Which specific Terraform functionality can help accomplish this task? (Choose the best answer.)
- A. Terraform remote state
- B. Terraform local-exec
- C. Terraform modules
- D. Terraform remote-exec
Answer: C
NEW QUESTION 37
You are using Oracle Cloud Infrastructure (OCI) console to set up an alarm on a budget to track your OCI spending.
Which two are valid targets for creating a budget in OCI? (Choose two.)
- A. Select group as the type of target for your budget.
- B. Select Compartment as the type of target for your budget.
- C. Select Cost-Tracking Tags as the type of target for your budget.
- D. Select user as the type of target for your budget.
- E. Select Tenancy as the type of target for your budget.
Answer: B,C
Explanation:
https://docs.oracle.com/en-us/iaas/Content/Billing/Concepts/budgetsoverview.htm
NEW QUESTION 38
You have been asked to investigate a potential security risk on your company's Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking through the audit logs for suspicious activity.
How can you retrieve the audit logs using the OCI Command Line Interface (CLI)? (Choose the best answer.) oci audit event list --end-time $end-time --compartment-id $compartment-id
- A. oci audit event list --start-time $start-time --compartment-id $compartment-id
- B. oci audit event list --start-time $start-time --end-time $end-time --
- C. compartment-id $compartment-id
oci audit event list --start-time $start-time --end-time $end-time --tenancy- - D. id $tenancy-id
Answer: C
NEW QUESTION 39
Which two statements about the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI) are TRUE? (Choose two.)
- A. The CLI provides the same core functionality as the Console, plus additional commands.
- B. You can run CLI commands from inside OCI Regions only.
- C. You can filter CLI output using the JMESPath query option for JSON.
- D. The CLI provides an automatic way to connect with instances provisioned on OCI.
- E. The CLI allows you to use the Python language to interact with OCI APIs.
Answer: A,C
Explanation:
https://docs.oracle.com/en-us/iaas/Content/API/SDKDocs/cliusing.htm
https://blogs.oracle.com/cloud-infrastructure/post/exploring-the-search-and-query-features-of-oracle-cloud-infrastructure-command-line-interface
NEW QUESTION 40
Your deployment platform within Oracle Cloud Infrastructure (OCI) leverages a compute instance with multiple block volumes attached. There are multiple teams that use the same compute instance and have access to these block volumes. You want to ensure that no one accidentally deletes any of these block volumes. You have started to construct the following IAM policy but need to determine which permissions should be used.
allow group DeploymentUsers to manage volume-family where ANY
{ request.permission != <???>, request.permission != <???>, request.permission !=
<???> }
Which permissions can you use in place of <???> in this policy? (Choose the best answer.)
- A. DELETE_VOLUME, DELETE_VOLUME_ATTACHMENT, DELETE_VOLUME_BACKUP
- B. VOLUME_ERASE, VOLUME_ATTACHMENT_ERASE, VOLUME_BACKUP_ERASE
- C. ERASE_VOLUME, ERASE_VOLUME_ATTACHMENT, ERASE_VOLUME_BACKUP
- D. VOLUME_DELETE, VOLUME_ATTACHMENT_DELETE, VOLUME_BACKUP_DELETE
Answer: D
NEW QUESTION 41
You are asked to deploy a new application that has been designed to scale horizontally. The business stakeholders have asked that the application be deployed in us-phoenix-1.
Normal usage requires 2 OCPUs. You expect to have few spikes during the week, that will require up to 4 OCPUs, and a major usage uptick at the end of each month that will require 8 OCPUs.
What is the most cost-effective approach to implement a highly available and scalable solution? (Choose the best answer.)
- A. Create an instance with 1 OCPU shape. Use the Resize Instance action to scale up to a larger shape when more resources are needed.
- B. Create an instance pool with a VM.Standard2.1 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances and a maximum of 8 instances.
- C. Create an instance pool with a VM.Standard2.2 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances, to handle the weekly spikes, and a maximum of 4 instances.
- D. Create an instance with 1 OCPU shape. Use a CLI script to clone it when more resources are needed.
Answer: C
NEW QUESTION 42
You have been asked to update the lifecycle policy for object storage using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI).
Which command can successfully update the policy? (Choose the best answer.)
- A. oci os object-lifecycle-policy get -ns <object_storage_namespace> -bn <bucket_name>
- B. oci os object-lifecycle-policy put -ns <object_storage_namespace> -bn <bucket_name>
- C. oci os object-lifecycle-policy put -ns <object_storage_namespace> -bn <bucket_name> - -items
<json_formatted_lifecycle_policy> - D. oci os object-lifecycle-policy delete -ns <object_storage_namespace> -bn <bucket_name>
Answer: C
Explanation:
https://docs.oracle.com/en-us/iaas/Content/Object/Tasks/usinglifecyclepolicies.htm#cli
https://docs.oracle.com/en-us/iaas/tools/oci-cli/2.17.0/oci_cli_docs/cmdref/os/object-lifecycle-policy/put.html
NEW QUESTION 43
You have recently joined a startup company and quickly find that nobody is tracking the amount of money spent on Oracle Cloud Infrastructure (OCI). Seeing an opportunity to help save money you begin creating a solution to better track the cost of resources provisioned by each individual on the team.
Which option allows you to identify excessive spend across all resources in your tenancy? (Choose the best answer.)
- A. Use the Events Service and create rules that will act when a new Object Storage bucket or Compute Instance has been created. Have the rule email you each time one of these events occurs.
- B. Create a tag namespace named BILLING with a Tag Key named CostCenter. Tag each of your resources with this Tag Key and the correct value.
- C. Use the Python SDK to write a custom application that will monitor the Audit log. Look for CREATE events and configure the application to send you an email each time a new resource is created.
- D. Create a budget for each compartment that will send a notification when monthly spend reaches a pre- defined amount.
Answer: D
NEW QUESTION 44
You have been monitoring your company's applications running in Oracle Cloud Infrastructure (OCI) and notice that the application is using OCI Traffic Management service. This service uses a traffic steering policy to distribute the DNS traffic based on subnet addresses in a rule set.
Which steering policy is in use in this particular case? (Choose the best answer.)
- A. IP Prefix steering
- B. Load Balancing policy
- C. Geolocation steering
- D. ASN steering policy
Answer: D
Explanation:
Explanation/Reference: https://k21academy.com/1z0-997/traffic-management-in-oci/
NEW QUESTION 45
You have a 750 MIB file in an Oracle Cloud Infrastructure (OCI) Object Storage bucket. You want to download the file in multiple parts to speed up the download using the OCI CLI. You also want to configure each part size to be 128 MIB.
Which is the correct OCI CLI command for this operation? (Choose the best answer.) oci os object get -ns my-namespace -bn my-bucket --name my-large-object --
- A. multipart-download-threshold 750 --parallel-download-count 128
oci os object download -ns my-namespace -bn my-bucket --name my-large-object - B. --resume-put --multipart-download-threshold 500 --part-size 128
oci os object get -ns my-namespace -bn my-bucket --name my-large-object -- - C. multipart-download-threshold 500 --part-size 128
- D. --multipart-download-threshold 750 --parallel-download-count 128
oci os object download -ns my-namespace -bn my-bucket --name my-large-object
Answer: C
Explanation:
Explanation/Reference: https://docs.oracle.com/en-us/iaas/Content/API/SDKDocs/cliusing.htm
NEW QUESTION 46
You have created a geolocation steering policy in the Oracle Cloud Infrastructure (OCI) Traffic Management service, with this configuration:
What happens to requests that originate in Africa? (Choose the best answer.)
- A. The traffic will be forwarded to Pool 1. If Pool 1 is not available, then it will be forwarded to Pool 2.
- B. The traffic will be forwarded at the same time to both Pool 1 and Pool 2.
- C. The traffic will be forwarded randomly to any of the pools mentioned in the rules.
- D. The traffic will be dropped.
Answer: A
NEW QUESTION 47
A developer has created a file system in Oracle Cloud Infrastructure (OCI) File Storage service. She launches an Oracle Linux compute instance and successfully mounts the file system from the instance.
She then tries writing to the file system from the compute instance using the following command:
touch /mnt/yourmountpoint/helloworld
But gets an error message:
touch: cannot touch '/mnt/yourmountpoint/helloworrld': Permission denied Which is a reason for this error? (Choose the best answer.)
- A. 'touch' command is not available in Oracle Linux by default.
- B. Service limits or quota for file system writes have been breached.
- C. User is connecting as the default Oracle Linux user 'opc' instead of 'root' user.
- D. User is not part of any OCI Identity and Access Management group with write permissions to File Storage service.
Answer: D
NEW QUESTION 48
You have created a geolocation steering policy in the Oracle Cloud Infrastructure (OCI) Traffic Management service, with this configuration:
What happens to requests that originate in Africa? (Choose the best answer.)
- A. The traffic will be forwarded at the same time to both Pool 1 and Pool 2.
- B. The traffic will be forwarded to Pool 1. If Pool 1 is not available, then it will be forwarded to Pool 2.
- C. The traffic will be forwarded randomly to any of the pools mentioned in the rules.
- D. The traffic will be dropped.
Answer: C
Explanation:
This policy currently has no global catch-all. No global catch-all means that queries not matching any of the above rules will receive a random answer. Global Catche-all need to set up if the traffic does not meet any condition in the pool and you still want to serve the request. Default is serve randomly.
https://www.oracle.com/a/ocom/docs/cloud/traffic-management-100.pdf
NEW QUESTION 49
You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:
You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet.
Which action would you take to accomplish the task? (Choose the best answer.)
- A. Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the instance that hosts the company website.
- B. Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the public subnet that hosts the company website.
- C. In default security list, add a stateful rule to allow ingress access on port 443.
- D. Create a new security list with a stateful rule to allow ingress access on port 443 and associate it to the public subnet.
Answer: A
NEW QUESTION 50
You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively.
You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us-phoenix-1 region only and not any other OCI regions.
What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.) Allow group PHX-Admins to manage all-resources in tenancy where
- A. request.permission= 'phx'
Allow group PHX-Admins to manage all-resources in tenancy where - B. request.target= 'phx'
Allow group PHX-Admins to manage all-resources in tenancy where - C. request.region= 'phx'
Allow group PHX-Admins to manage all-resources in tenancy where - D. request.location= 'phx'
Answer: C
NEW QUESTION 51
Your team implemented a SaaS application that requires a whole system deployment for each new customer. The infrastructure provisioning is already automated via Terraform, and now you have been asked to develop an Ansible playbook to centralize configuration file management and deployment.
What is the most effective way to ensure your playbooks are utilizing up-to-date and accurate inventory? (Choose the best answer.)
- A. Export an inventory list from the Oracle Cloud Infrastructure Web console.
- B. Export an inventory list using Terraform apply command.
- C. Download the dynamic inventory script provided by Oracle Cloud Infrastructure and include it in the playbook invocation command.
- D. Implement a Command Line Interface script to list all the resources and run it within Ansible to generate a dynamic inventory list.
Answer: C
NEW QUESTION 52
......
Download Latest & Valid Questions For Oracle 1Z0-1067-21 exam: https://measureup.preppdf.com/Oracle/1Z0-1067-21-prepaway-exam-dumps.html