Practice with 1z0-1067-22 Dumps for Oracle Cloud Solutions Infrastructure Certified Exam Questions & Answer
REAL 1z0-1067-22 Exam Questions With 100% Refund Guarantee
NEW QUESTION # 26
Security Testing Policy describes when and how you may conduct certain types of security testing of Oracle Cloud Services, including vulnerability and penetration tests, as well as tests involving data scraping tools.
What does Oracle allow as part of this testing? (Choose the best answer.)
- A. Customers are allowed to use their own testing and monitoring tools.
- B. Customers can validate that their network resources are isolated from other customer resources.
- C. Customers can simulate DoS attack scenarios as long as it's restricted to the customer's own environment.
- D. Customers are allowed to test Oracle Cloud Infrastructure (OCI) hardware related to resources in their tenancy.
Answer: A
Explanation:
Explanation
Using your own monitoring and testing tools, you may conduct penetration and vulnerability tests of your acquired single-tenant Oracle Infrastructure as a Service (IaaS) offerings
NEW QUESTION # 27
You created an Oracle Linux compute instance through the Oracle Cloud Infrastructure (OCI) management console then immediately realize you forgot toadd an SSH key file. You notice that OCI compute service provides instance console connections that supports adding SSH keys for a running instance. Hence, you created the console connection for your Linux server and activated it using the connection string provided.
However, now you get prompted for a username and password to login.
What option should you recommend to add the SSH key to your running instance, while minimizing the administrative overhead? (Choose the best answer.)
- A. You need to configure the boot loader to use ttyS0 as a console terminal on the VM.
- B. You need to terminate the running instance and recreate it by providing the SSH key file.
- C. You need to modify the serial console connection string to include the identity file flag, -i to specify the SSH key to use.
- D. You need to reboot the instance from the console, boot into the bash shell in maintenance mode,and add SSH keys for the opc user.
Answer: D
Explanation:
Explanation
If you created an instance without an SSH key, you can use the serial console toboot into maintenance mode and add or reset the SSH key for the opc user or reset the password for the opc user. Alternately, you can stop the instance, attach the boot volume to a new instance, and configure SSH on the new instance.
https://docs.oracle.com/en-us/iaas/Content/Compute/Tasks/accessinginstance.htm
NEW QUESTION # 28
You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:
You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet.
Which actionwould you take to accomplish the task? (Choose the best answer.)
- A. Create a network security group, add a stateful rule to allow ingressaccess on port 443 and associate it to the instance that hosts the company website.
- B. In default security list,add a stateful rule to allow ingress access on port 443.
- C. Create a new security list with a stateful rule to allow ingress access on port 443 and associate it to the public subnet.
- D. Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the public subnet that hosts the company website.
Answer: A
Explanation:
Explanation
Since we want to avoid exposing other instances in the same public subnet to the internet, Network Security Groups (NSG) must be used instead of Security Lists. NSG are attached to the vnic of the instance and not to the subnet
NEW QUESTION # 29
You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.
The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the computeinstance from the internet. However, you are not able to connect to the web server using your web browser.
Which step will resolve the issue? (Choose the best answer.)
- A. In the route table, add a rule for your default traffic to be routed to NAT gateway.
- B. In the security list, remove the ssh rule.
- C. In the security list, add an ingress rule for port 80 (http).
- D. In the route table, add a rule for your default traffic to be routed to service gateway.
Answer: C
Explanation:
Explanation
You need to add a rule in thesecurity list table to allow access to web application. Web applications are usually exposed over port 80 (HTTP), therefore answer B makes sense here.
NEW QUESTION # 30
Multiple teams are sharing a tenancy in OracleCloud Infrastructure (OCI). You are asked to figure out an appropriate method to manage OCI costs.
Which is NOT a valid technique to accurately attribute costs to resources used by each team? (Choose the best answer.)
- A. Create separate compartment for each team. Use the OCI cost analysis tools to filter costs by compartment.
- B. Create an Identity and Access Management (IAM) group for each team. Create an OCI budget for each group to track spending.
- C. Create a Cost-Tracking tag. Apply this tag to all resources with team information. Use the OCI cost analysis tools to filter costs by tags.
- D. Define and use tags for resources used by each team. Analyze usage data from the OCI Usage Report which has detailed information about resources and tags.
Answer: B
Explanation:
Explanation
Budgets are set on cost-tracking tags or on compartments not by user groups
NEW QUESTION # 31
You have created an Autonomous Data Warehouse (ADW) service in your company's Oracle Cloud Infrastructure (OCI) tenancy and you now have to load historical data into it. You have already extracted this historical data from multiple data marts and data warehouses. This data is stored in multiple CSV text files and these files are ranging in size from 25 MB to 20 GB.
Which is the most efficient and error tolerant method for loading data into ADW? (Choose the best answer.)
- A. CreateAuth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using the web console upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA foreach CSV file to copy the contents into the corresponding ADW database table.
- B. Create Auth token, useit to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute Data Pump Import for each CSV file to copy the contents into the corresponding ADW database table.
- C. Create the tables in the ADW database and then execute SQL*Loader for each CSV file to load the contents into the corresponding ADW database table.
- D. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA for each CSV file to copy the contents into the corresponding ADW database table.
Answer: D
Explanation:
Explanation
Using Object Storage and COPY_DATA is the standard recommended method for fetching data into ADW.
Furthermore using CLI over web has the benefit of multipart upload, that is chunk upload of large files, thus reducing the chance of a transfer failure
NEW QUESTION # 32
You havecreated a geolocation steering policy in the Oracle Cloud Infrastructure (OCI) Traffic Management service, with this configuration:
What happens to requests that originate in Africa? (Choose the best answer.)
- A. The traffic will be forwarded randomly to any of the pools mentioned in the rules.
- B. The traffic will be dropped.
- C. The traffic will be forwarded at the same time to both Pool 1 and Pool 2.
- D. The traffic will be forwarded to Pool 1. If Pool 1 is not available, then it will be forwarded toPool 2.
Answer: A
Explanation:
Explanation
This policy currently has no global catch-all. No global catch-all means that queries not matching any of the above rules will receive a random answer. Global Catche-all need to set up if the traffic does not meet any condition in the pool and you still want to serve the request. Default is serve randomly.
https://www.oracle.com/a/ocom/docs/cloud/traffic-management-100.pdf
NEW QUESTION # 33
Your deploymentplatform within Oracle Cloud Infrastructure (OCI) leverages a compute instance with multiple block volumes attached. There are multiple teams that use the same compute instance and have access to these block volumes. You want to ensure that no one accidentally deletes any of these block volumes. You have started to construct the following IAM policy but need to determine which permissions should be used.
allow group DeploymentUsers to manage volume-family where ANY
{ request.permission != <???>, request.permission != <???>, request.permission !=
<???> }
Which permissions can you use in place of <???> in this policy? (Choose the best answer.)
- A. VOLUME_ERASE, VOLUME_ATTACHMENT_ERASE, VOLUME_BACKUP_ERASE
- B. VOLUME_DELETE, VOLUME_ATTACHMENT_DELETE, VOLUME_BACKUP_DELETE
- C. ERASE_VOLUME, ERASE_VOLUME_ATTACHMENT, ERASE_VOLUME_BACKUP
- D. DELETE_VOLUME, DELETE_VOLUME_ATTACHMENT, DELETE_VOLUME_BACKUP
Answer: B
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/Content/Identity/Concepts/policyadvancedfeatures.htm
NEW QUESTION # 34
A developer has created a file system in Oracle Cloud Infrastructure (OCI) File Storage service. She launches an Oracle Linux compute instance and successfully mounts the file system from the instance.
She then tries writing to the file system from the compute instance using the following command:
touch /mnt/yourmountpoint/helloworld
But gets an error message:
touch: cannot touch'/mnt/yourmountpoint/helloworrld': Permission denied Which is a reason for this error? (Choose the best answer.)
- A. User is connecting as the default Oracle Linux user 'opc' instead of 'root' user.
- B. 'touch' command is not available in Oracle Linux by default.
- C. Service limits or quota for file system writes have been breached.
- D. Useris not part of any OCI Identity and Access Management group with write permissions to File Storage service.
Answer: A
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/Content/File/Troubleshooting/cannotwrite.htm When a file system is created, the root user owns the root directory. If you're connecting from an instance that uses a Linux orCentOS platform image, the default user is opc. The default user is ubuntu when you connect from an instance that uses an Ubuntu platform image. These default users are not root users, so you can't initially write a file or directory to a new file system with these users.
NEW QUESTION # 35
You have a group pf developers who launch multiple VM.Standard2.2 compute instances every day into the compartment Dev. As a result, your OCI tenancyquickly hit the service limit for this shape. Other groups can no longer create new instances using VM.Standard2.2 shape.
Because of this, your company has issued a new mandate that the Dev compartment must include a quota to allow for use of only 20 VM.Standard2.2 shapes per Availability Domain. Your solution should not affect any other compartment in the tenancy.
Which quota statement should be used to implement this new requirement? (Choose the best answer.)
- A. zero compute quotas in tenancy set compute quota vm-standard2-2-count to 20 in tenancy dev
- B. set compute quota vm-standard2-2-count to 20 in compartment dev
- C. zero compute quotas in tenancy set compute quota vm-standard2-2-count to 20 in compartment dev
- D. set compute quota vm-standard2-2count to10 in compartment dev where request.region = us-phoenix-1
Answer: B
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/Content/General/Concepts/resourcequotas.htm#two
NEW QUESTION # 36
You are asked to deploy a new application that has been designed to scale horizontally. The business stakeholders have asked that theapplication be deployed in us-phoenix-1.
Normal usage requires 2 OCPUs. You expect to have few spikes during the week, that will require up to 4 OCPUs, and a major usage uptick at the end of each month that will require 8 OCPUs.
What is the most cost-effective approach to implement a highly available and scalable solution? (Choose the best answer.)
- A. Create an instance with 1 OCPU shape.Use a CLI script to clone it when more resources are needed.
- B. Create an instance pool with a VM.Standard2.2 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances, to handle the weekly spikes, and a maximum of 4 instances.
- C. Create an instance with 1 OCPU shape. Use the Resize Instance action to scale up to a larger shape when more resources are needed.
- D. Create an instance pool with a VM.Standard2.1 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances and a maximum of 8 instances.
Answer: D
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/Content/Compute/References/computeshapes.htm#baremetalshapes__bm-stan
NEW QUESTION # 37
You are launching a Windows server in your Oracle Cloud Infrastructure (OCI) tenancy.You provided a startup script during instance initialization, but it was not executed successfully.
What is a possible reason for this error? (Choose the best answer.)
- A. Didn't include anything in user_data.
- B. Specified a #directive on the first line of your script.
- C. Ran a cloudbase-init script instead of cloud-init.
- D. Wrote a custom script which tried to install GPU drivers.
Answer: C
NEW QUESTION # 38
You have a 750 MIB file in an Oracle Cloud Infrastructure (OCI)Object Storage bucket. You want to download the file in multiple parts to speed up the download using the OCI CLI. You also want to configure each part size to be 128 MIB.
Which is the correct OCI CLI command for this operation? (Choose the best answer.)
- A. oci os object get -ns my-namespace -bn my-bucket --name my-large-object -- multipart-download-threshold 750 --parallel-download-count 128
- B. oci os object download -ns my-namespace -bn my-bucket --name my-large-object -- resume-put
--multipart-download-threshold 500 --part-size 128 - C. oci os object get -ns my-namespace -bn my-bucket --name my-large-object
--multipart-download-threshold 500 --part-size 128 - D. oci os object download -ns my-namespace -bn my-bucket --name my-large-object -- multipart-download-threshold 750 --parallel-download-count 128
Answer: C
Explanation:
Explanation
https://docs.public.oneportal.content.oci.oraclecloud.com/en-us/iaas/Content/API/SDKDocs/cliusing.htm
https://docs.oracle.com/en-us/iaas/tools/oci-cli/2.6.15/oci_cli_docs/cmdref/os/object/get.html
NEW QUESTION # 39
You have a web application running on Oracle Cloud Infrastructure (OCI) that lets users log in with a username and password. You notice that an attacker has tried to use SQL comment "--" to alter the database query, remove the password check and log in as a user. You decide to prevent any future attacks.
Which of the following OCI services or features would you choose tosafeguard your application? (Choose the best answer.)
- A. Data Safe
- B. Web Application Framework (WAF)
- C. Vault
- D. Network Security Group
Answer: B
Explanation:
Explanation
WAF provides you with the ability to create and manage rules for internet threats including Cross-SiteScripting (XSS), SQL Injection and other OWASP-defined vulnerabilities.
NEW QUESTION # 40
You have the following compartment structure within your company's Oracle Cloud Infrastructure (OCI) tenancy:
You want to create a policy in the root compartment to allow SystemAdmins to manage VCNs only in CompartmentC.
Which policy is correct? (Choose the best answer.)
- A. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentC
- B. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentB:CompartmentC
- C. Allow group SystemAdmins to manage virtual-network-family in
compartmentCompartmentA:CompartmentB:CompartmentC - D. Allow group SystemAdmins to manage virtual-network-family in compartment Root
Answer: C
Explanation:
Explanation
Complete Compartment path is required. It is also advisable to do so, as policies are name based ones.
NEW QUESTION # 41
Your customer is running a set of compute instances inside a private subnet to manage their workloads on Oracle Cloud Infrastructure(OCI) tenancy. You have set up auto scaling feature to provide consistent performance to their end users during period of high demand.
Which step should be met for auto scaling to work? (Choose the best answer.)
- A. Audit logs for the instances should be enabled.
- B. Monitoring for the instances should not be enabled.
- C. Service gateway should be setup to allow instances to send metrics to monitoring service.
- D. OS Management Service agent (osms) mustbe installed on the instances.
Answer: C
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/Content/Compute/Tasks/enablingmonitoring.htm#Enabling_Monitoring_for_C Service gateways or public IP addresses: The compute instance must have either a public IP address or a service gateway to be able to send compute instance metrics to the Monitoring service.
For metric-based autoscaling, monitoring is enabled on the instances in the instance pool, and the Monitoring service is receiving metrics that are emitted by the instance. When you initially create an instance pool using instances that support monitoring, monitoring is enabled by default, regardless of the settingsin the pool's instance configuration.
NEW QUESTION # 42
Your company hasrestructured its HR departments. As part of this change, you also need to re-organize compartments within Oracle Cloud Infrastructure (OCI) to align them to the company's new organizational structure. The following change is required:
Compartment Team_xneeds to be moved under a new parent compartment, Project_B The tenancy has the following policies defined for compartments Project_A and Project_B: Policy1: Allow group G1 to manage instance-family in compartment HR:Project_A Policy2: Allow group G2 tomanage instance-family in compartment HR:Project_B Which two statements describe the impacts after the compartment Team_x is moved? (Choose two.)
- A. Group G1 can now manage instance-families in compartment Project_A but not in compartment Team_x
- B. Group G1 can now manage instance-families in compartment Project_A, compartment Project_B and compartment Team_X
- C. Group G2 can now manage instance-families in compartment Project_B and compartment Team_X
- D. Group G2 can now manage instance-families in compartment Project_B, compartment Project_A and compartment Team_X
- E. Group G2 can now manage instance-families in compartment Project_A but not in compartment Team_x
Answer: A,C
NEW QUESTION # 43
Which option contains the essential components of the Oracle Cloud Infrastructure Notifications service?
(Choose the best answer.)
- A. An ALARM with a name unique across thecompartment, a SUBSCRIPTION, and a METRIC with the measurement of interest.
- B. A TOPIC with a name unique across the tenancy, a SUBSCRIPTION, and a MESSAGE where content is published.
- C. A TOPIC with a name unique across the compartment, a SUBSCRIPTION, and a MESSAGE where content is published.
- D. An ALARM with a name unique across the tenancy, a SUBSCRIPTION, and a METRIC with the measurement of interest.
Answer: B
Explanation:
Explanation
https://docs.oracle.com/en-us/iaas/Content/Notification/Concepts/notificationoverview.htm
https://docs.oracle.com/en-us/iaas/Content/Notification/Tasks/managingtopicsandsubscriptions.htm
NEW QUESTION # 44
......
PDF Download Oracle Test To Gain Brilliante Result!: https://examtorrent.actual4test.com/1z0-1067-22_examcollection.html