TorrentVCE 1Z0-1072-20 Real Exam Question Answers Updated [Feb 04, 2022]
Easily To Pass New Oracle 1Z0-1072-20 Dumps with 240 Questions
Oracle 1Z0-1072-20 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
NEW QUESTION 76
You have an Oracle Cloud Infrastructure (OCI) load balancer distributing traffic via an evenly-weighted round robin policy to your back-end web servers. You notice that one of your web servers is receiving more traffic than other web servers.
How can you resolve this to make sure traffic is evenly distributed across all back-end webservers?
- A. Create separate listeners for each backend web server.
- B. Disable cookie-based session persistence on your backend set.
- C. Disable SSL configuration associated with your backend set.
- D. Change keep-alive setting between the load balancer and backend server.
Answer: A
Explanation:
Reference:
https://docs.cloud.oracle.com/en-us/iaas/Content/Balance/Concepts/balanceoverview.htm
NEW QUESTION 77
Which two options are available when setting up DNS for your bare metal and virtual machine DB Systems?
(Choose two.)
- A. custom resolver
- B. Google DNS servers
- C. Internet and custom resolver
- D. Internet and virtual cloud network (VCN) resolver
Answer: A,D
NEW QUESTION 78
Which two resources reside exclusively in a single Oracle Cloud Infrastructure Availability Domain? (Choose two.)
- A. Identity and Access Management Groups
- B. Object Storage
- C. Block volume
- D. Web Application Firewall policy
- E. Compute instance
Answer: C,E
Explanation:
Availability Domain-Specific Resources
DB Systems
ephemeral public IPs
instances: They can be attached only to volumes in the same availability domain.
subnets: When you create a subnet, you choose whether it is regional or specific to an availability domain. Oracle recommends using regional subnets.
volumes: They can be attached only to an instance in the same availability domain.
NEW QUESTION 79
You deployed a web server in Oracle Cloud Infrastructure using an ephemeral public IP. After a few changes in your web server configuration, you rebooted the server and a new public IP was associated to your instance.
What should you do to prevent this from happening again?
- A. Create a reserved public IP and associate it with the hosts file of your web server
- B. Create a reserved public IP and associate it with the security list that your complete instance is using
- C. Create a reserved public IP and associate it with the subnet of your compute instance
- D. Create a reserved public IP and associate it with the VNIC of your compute instance
Answer: D
Explanation:
A public IP address is an IPv4 address that is reachable from the internet. If a resource in your tenancy needs to be directly reachable from the internet, it must have a public IP address. Depending on the type of resource, there might be other requirements.
There are two types of public IPs:
Ephemeral: Think of it as temporary and existing for the lifetime of the instance.
Reserved: Think of it as persistent and existing beyond the lifetime of the instance it's assigned to. You can unassign it and then reassign it to another instance whenever you like. Exception: reserved public IPs on public load balancers.
To create a new reserved public IP in your pool
Confirm you're viewing the region and compartment where you want to create the reserved public IP.
Open the navigation menu. Under Core Infrastructure, go to Networking and click Public IPs.
Click Create Reserved Public IP.
Enter the following:
Name: An optional friendly name for the reserved public IP. The name doesn't have to be unique, and you can change it later. Avoid entering confidential information.
Compartment: Leave as is.
Tags:Optionally, you can apply tags. If you have permissions to create a resource, you also have permissions to apply free-form tags to that resource. To apply a defined tag, you must have permissions to use the tag namespace. For more information about tagging, see Resource Tags. If you are not sure if you should apply tags, skip this option (you can apply tags later) or ask your administrator.
Click Create Reserved Public IP.
To assign a reserved public IP to a private IP
Prerequisite: The private IP must not have an ephemeral or reserved public IP already assigned to it. If it does, first delete the ephemeral public IP, or unassign the reserved public IP.
Confirm you're viewing the compartment that contains the instance with the private IP you're interested in.
Open the navigation menu. Under Core Infrastructure, go to Compute and click Instances.
Click the instance to view its details.
Under Resources, click Attached VNICs.
The primary VNIC and any secondary VNICs attached to the instance are displayed.
Click the VNIC you're interested in.
Under Resources, click IP Addresses.
The VNIC's primary private IP and any secondary private IPs are displayed.
For the private IP you're interested in, click the Actions icon (three dots), and then click Edit.
In the Public IP Address section, for Public IP Type, select the radio button for Reserved Public IP.
Enter the following:
Compartment: The compartment that contains the reserved public IP you want to assign.
Reserved Public IP: The reserved public IP you want to assign. You have three choices:
Create a new reserved public IP. You may optionally provide a friendly name for it. The name doesn't have to be unique, and you can change it later. Avoid entering confidential information.
Assign a reserved public IP that is currently unassigned.
Move a reserved public IP from another private IP.
Click Update.
NEW QUESTION 80
Which deployment architecture is offered when you deploy the Platform Service Manager based Database Cloud Service (DBCS) onto Oracle Cloud Infrastructure?
- A. Two node Primary RAC database leveraging ACFS for the shared file system
- B. Two node Primary RAC database with a two node RAC Data Guard Standby in Maximum Performance mode
- C. Single Instance database with a Single Instance Data Guard in Maximum Performance mode
- D. Single Instance database with a Single Instance Data Guard in Maximum Protection mode
Answer: B
NEW QUESTION 81
Which two tools would you use to manage Database Cloud Service (DBCS)? (Choose two.)
- A. Oracle Enterprise Manager
- B. Oracle Swingbench
- C. SQL Developer
- D. psql
Answer: A,C
NEW QUESTION 82
Which two statements about the Oracle File Storage Service (FSS) Security are accurate? (Choose two.)
- A. Security lists can be used as a virtual firewall to prevent an instance from mounting an FSS mount target within a subnet.
- B. FSS leverages UNIX user group and permission checking for file access security.
- C. Data in transit to an FSS mount target is encrypted.
- D. Oracle IAM controls which filesystems are mountable by which instances.
- E. Encryption of file storage in FSS is optional.
Answer: B,C
Explanation:
All data is encrypted at rest. and In-transit encryption provides a way to secure your data between instances and mounted file systems using TLS v. 1.2 (Transport Layer Security) encryption.
File Storage service supports the AUTH_UNIX style of authentication and permission checking for remote NFS client requests.
NEW QUESTION 83
You create an autoscaling configuration of Linux compute instances in Oracle Cloud Infrastructure (OCI). You noticed that your application is running slow.
After checking your compute instances, you noticed that autoscaling is not launching additional instances, even though the existing compute instances already have high memory usage.
How can you resolve this issue?
- A. Install the monitoring agent to all compute instances which will trigger the autoscaling group.
- B. Modify the scaling policy to monitor memory usage and scale up the number of instances when it meets the threshold.
- C. Modify the scaling policy to monitor CPU usage and scale up the number of instances when it meets the threshold.
- D. Install OCI SDK in all compute instances and create a script that will trigger the autoscaling event if there is high memory usage.
Answer: C
NEW QUESTION 84
When creating a subnet, one or more placeholder security lists are often associated with the subnet. Why?
- A. Each operator needs its own security list.
- B. Each network endpoint or instance in the subnet needs its own security list.
- C. It is not possible to add or remove security lists after a subnet is created.
- D. Each protocol needs its own security list.
Answer: B
Explanation:
Explanation
References:
https://docs.cloud.oracle.com/iaas/Content/Network/Concepts/securitylists.htm?tocpath=Services%7CNetworkin
NEW QUESTION 85
You have an external facing web server running in the Oracle Cloud Infrastructure (OCI) London region. You are notified that customers in North America and Australia are facing high latency while connecting to your web server.
Which services are available on OCI that can help you get current latency statistics to your web server from these markets?
- A. Use DNS Zone Management service to check latency over that connection
- B. Setup a FastConnect with customers in those markets and check latency over that connection
- C. Use the Internet Intelligence tool. Run tests using the web server's public IP address and review traceroute details from different vantage points
- D. Setup an IPsec VPN with customers in those markets and check latency over that connection
Answer: C
Explanation:
Explanation
The second tool, OCI IP Troubleshooting, helps troubleshoot issues with public facing IP addresses.
This feature is also part of our Internet Intelligence toolset, providing analytical insight to help network operations teams reduce the time it takes to troubleshoot an issue by providing awareness of availability and latency across the Internet.
Ref: https://blogs.oracle.com/cloud-infrastructure/internet-intelligence,-now-availab le-in-the-oracle-cloud-infrastructure-console
NEW QUESTION 86
You are a network architect of an application running on Oracle Cloud Infrastructure (OCI). Your security team has informed you about a security patch that needs to be applied immediately to one of the backend web servers. What should you do to ensure that the OCI load balancer does not forward traffic to this backend server during maintenance?
- A. Stop the load balancer for maintenance and restart the load balancer after the maintenance is finished
- B. Drain all existing connections to this backend server and mark the backend web server offline
- C. Edit the security list associated with the subnet to avoid traffic connectivity to this backend serve
- D. Create another OCI load balancer for the backend web servers, which are active and handling traffic
Answer: B
Explanation:
A load balancer improves resource utilization, facilitates scaling, and helps ensure high availability. You can configure multiple load balancing policies and application-specific health checks to ensure that the load balancer directs traffic only to healthy instances. The load balancer can reduce your maintenance window by draining traffic from an unhealthy application server before you remove it from service for maintenance.
The Load Balancing service considers a server marked drain available for existing persisted sessions. New requests that are not part of an existing persisted session are not sent to that server.
Edit Drain State: Opens a dialog box in which you can change the drain state.
If you set the server's drain status to true, the load balancer stops forwarding new TCP connections and new non-sticky HTTP requests to this backend server.
This setting allows an administrator to take the server out of rotation for maintenance purposes.
e. Edit Offline State: Opens a dialog box in which you can change the offline status.
If you set the server's offline status to true, the load balance forwards no ingress traffic to this backend server.
NEW QUESTION 87
You have a working application in the US East region. The app is a 3-tier app with a database backend - you take regular backups of the database into OCI Object Storage in the US East region. For Business continuity; you are leveraging OCI Object Storage cross-region copy feature to copy database backups to the US West region. Which of the following three steps do you need to execute to meet your requirement?
- A. Provide a destination object name
- B. Provide an option to choose bulk copying of objects
- C. Specify an existing destination bucket
- D. Write an IAM policy and authorize the Object Storage service to manage objects on your behalf
- E. Choose an overwrite rule
- F. Specify the bucket visibility for both the source and destination buckets
Answer: C,D,E
Explanation:
You can copy objects to other buckets in the same region and to buckets in other regions.
You must have the required access to both the source and destination buckets when performing an object copy. You must also have permissions to manage objects in the source and destination buckets.
Because Object Storage is a regional service, you must authorize the Object Storage service for each region carrying out copy operations on your behalf. For example, you might authorize the Object Storage service in region US East (Ashburn) to manage objects on your behalf. Once you authorize the Object Storage service, you can copy an object stored in a US East (Ashburn) bucket to a bucket in another region.
You can use overwrite rules to control the copying of objects based on their entity tag (ETag) values.
Specify an existing target bucket for the copy request. The copy operation does not automatically create buckets.
NEW QUESTION 88
You have created a public subnet in a VCN, and your public subnet has a Route Table, a Security List, and an Internet Gateway. However, none of the compute instances can connect to the Internet.
Which two are possible reasons for the connectivity issue? (Choose two.)
- A. The Route Table has no default route for routing traffic to the Internet Gateway.
- B. There is no Dynamic Routing Gateway (DRG) associated with the VCN.
- C. There is no stateful egress rule in the Security List associated with the public subnet.
- D. There is no stateful ingress rule in the Security List associated with the public subnet.
Answer: A,C
Explanation:
Explanation
An internet gateway as an optional virtual router that connects the edge of the VCN with the internet. To use the gateway, the hosts on both ends of the connection must have public IP addresses for routing. Connections that originate in your VCN and are destined for a public IP address (either inside or outside the VCN) go through the internet gateway. Connections that originate outside the VCN and are destined for a public IP address inside the VCN go through the internet gateway.
Working with Internet Gateways
You create an internet gateway in the context of a specific VCN. In other words, the internet gateway is automatically attached to a VCN. However, you can disable and re-enable the internet gateway at any time.
Compare this with a dynamic routing gateway (DRG), which you create as a standalone object that you then attach to a particular VCN. DRGs use a different model because they're intended to be modular building blocks for privately connecting VCNs to your on-premises network.
For traffic to flow between a subnet and an internet gateway, you must create a route rule accordingly in the subnet's route table (for example, destination CIDR = 0.0.0.0/0 and target = internet gateway). If the internet gateway is disabled, that means no traffic will flow to or from the internet even if there's a route rule that enables that traffic. For more information, see Route Tables.
For the purposes of access control, you must specify the compartment where you want the internet gateway to reside. If you're not sure which compartment to use, put the internet gateway in the same compartment as the cloud network. For more information, see Access Control.
You may optionally assign a friendly name to the internet gateway. It doesn't have to be unique, and you can change it later. Oracle automatically assigns the internet gateway a unique identifier called an Oracle Cloud ID (OCID). For more information, see Resource Identifiers.
To delete an internet gateway, it does not have to be disabled, but there must not be a route table that lists it as a target.
AS per compute instances can connect to the Internet so you use egress no ingress
NEW QUESTION 89
You created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains a DB System. The application requires a shared file system so you have provisioned one using the file storage service (FSS).
You also created the corresponding mount target in one of the application subnets. The VCN security lists are properly configured so that both application servers and the DB system can access the file system. The security team determines that the DB System should have read-only access to the file system.
What change should you make to satisfy this requirement?
- A. Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet.
- B. Create an instance principal for the DB System. Write an Identity and Access Management (IAM) policy that allows the instance principal read-only access to the file storage service.
- C. Connect via SSH to one of the application servers where the file system has been mounted. Use the Unix command chmod to change permissions on the file system directory, allowing the database user read only access.
- D. Modify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateless.
Answer: A
NEW QUESTION 90
You want an Oracle Cloud Infrastructure (OCI) compute instance in your compartment to make API calls to other services within OCI without storing credentials in a configuration file.
What do you need to do?
- A. Instances cannot access services outside their compartment
- B. Create a dynamic group with appropriate matching rules to include the instance, and reference this group in your IAM policy statement
- C. By default, all VM instances are created with an instance principal. Reference this instance principal in your IAM policy statement
- D. VM instances are treated as users. Create a user, assign the user to that VM instance, and reference the instance in your Identity and Access Management (IAM) policy statement
Answer: B
NEW QUESTION 91
Your company has decided to move a few applications to Oracle Cloud Infrastructure (OCI) and you have been asked to design a cloud-based disaster recovery (DR) solution. One of the requirements is to deploy the DR resources at least 300 miles from the home OCI region and minimize the network latency.
What will be the recommended deployment?
- A. Deploy production and DR applications in the same VCN. Create production subnets in one AD, and DR subnets in another AD.
- B. Deploy production and DR applications in two separate VCNs, each in different regions. Connect them using a VCN remote peering connection.
- C. Deploy production and DR applications in two separate virtual cloud networks (VCNs), each in different regions, and then use VCN local peering gateways for connectivity.
- D. Deploy production and DR applications in two separate VCNs in different availability domains (ADs) within your home region, and then use a VCN remote peering connection for connectivity.
Answer: B
Explanation:
Explanation
Remote VCN peering is the process of connecting two VCNs in different regions The peering allows the VCNs' resources to communicate using private IP addresses without routing the traffic over the internet or through your on-premises network.
NEW QUESTION 92
You are a system administrator of your company and you are asked to manage updates and patches across all your compute instances running Oracle Linux in Oracle Cloud Infrastructure (OCI). As part of your task, you need to apply all the latest kernel security updates to all instances.
Which OCI service will allow you to complete this task?
- A. OS Management
- B. Registry
- C. Resource Manager
- D. Streaming
- E. Storage Gateway
Answer: A
Explanation:
Explanation/Reference: https://blogs.oracle.com/cloud-infrastructure/os-management-with-oracle-cloud-infrastructure
NEW QUESTION 93
Which statement is NOT true about the Oracle Cloud Infrastructure Object Storage service?
- A. Object storage resources can be shared across tenancies.
- B. Immutable option for data stored in the Object Storage can be set via retention rules.
- C. Object lifecycle rules can be used to either archive or delete objects.
- D. Object versioning is enabled at namespace level.
Answer: B
Explanation:
Reference:
https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/usingversioning.htm
NEW QUESTION 94
You provisioned an Oracle Autonomous Data Warehouse (ADW) on Oracle Cloud Infrastructure (OCI) and imported data into ADW.
You want to give your business analyst the ability to connect to the ADW database and run queries.
Which two actions can help you meet this requirement? (Choose two.)
- A. Create a database user account for the business analyst.
- B. Grant the predefined database role DWROLE to the database user.
- C. Grant the predefined database role DWADW to the database user.
- D. Grant unlimited tablespace privilege to the database user.
- E. Grant the predefined database role DWUSER to the database user.
Answer: B,D
Explanation:
Explanation/Reference: https://oracle.github.io/learning-library/oci-library/L100-LAB/Autonomous_Data_Warehouse/ ADW_HOL.html
NEW QUESTION 95
Which option lists Virtual Cloud Networks (VCNs) that can be peered?
- A. VCN A (172.16.0.0/24) and VCN B (172.16.0.0/28)
- B. VCN A (10.0.2.0/16) and VCN B (10.0.2.0/25)
- C. VCN A (10.0.0.0/16) and VCN B (10.0.16.0/24)
- D. VCN A (10.0.0.0/16) and VCN B (10.1.0.0/16)
Answer: D
NEW QUESTION 96
Which two use Oracle dynamic routing gateway (DRG) for connectivity? (Choose two.)
- A. Local VCN peering
- B. Oracle Cloud Infrastructure FastConnect public peering
- C. Remote virtual cloud network (VCN) peering across region
- D. Oracle IPsec VPN
Answer: C,D
Explanation:
References:
https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Concepts/fastconnectoverview.htm You use a DRG when connecting your existing on-premises network to your virtual cloud network (VCN) with one (or both) of these:
IPSec VPN
Oracle Cloud Infrastructure FastConnect
You also use a DRG when peering a VCN with a VCN in a different region:
Remote VCN Peering (Across Regions)
NEW QUESTION 97
You need to set up instance principals so that an application running on an instance can call Oracle Cloud Infrastructure (OCI) public services, without the need to configure user credentials.
A developer in your team has already configured the application built using an OCI SDK to authenticate using the instance principals provider.
Which is NOT a necessary step to complete this set up?
- A. Deploy the application and the SDK to all the instances that belong to the dynamic group.
- B. Create a policy granting permissions to the dynamic group to access services in your compartment or tenancy.
- C. Generate Auth Tokens to enable instances in the dynamic group to authenticate with APIs.
- D. Create a dynamic group with matching rules to specify which instances you want to allow to make API calls against services.
Answer: A
Explanation:
Explanation/Reference: https://blogs.oracle.com/cloud-infrastructure/announcing-instance-principals-for-identity-and- access-management
NEW QUESTION 98
Which resource is required when connecting to your on-premise network from your Virtual Cloud Network (VCN) via IPSec VPN or FastConnect?
- A. local peering gateway
- B. NAT
- C. Internet Gateway (IGW)
- D. Dynamic Routing Gateway (DRG)
Answer: D
Explanation:
Explanation
References: https://cloud.oracle.com/networking/vcn/faq
NEW QUESTION 99
Which two statements are true about an Oracle Cloud Infrastructure object storage bucket? (Choose two.)
- A. You can associate a bucket with only a single compartment
- B. You can associate a bucket with multiple compartments
- C. You cannot change a bucket from private to public after it is created
- D. You cannot edit or append data to an object, but you can replace the entire object
Answer: A,D
Explanation:
Explanation
A bucket is associated with a single compartment.
You can't edit or append data to an object, but you can replace the entire object.
NEW QUESTION 100
......
Latest 1Z0-1072-20 Study Guides 2022 - With Test Engine PDF: https://www.torrentvce.com/1Z0-1072-20-valid-vce-collection.html