[Jan 07, 2022] Powerful 1Z0-1072-20 PDF Dumps for 1Z0-1072-20 Questions
Authentic 1Z0-1072-20 Dumps - Free PDF Questions to Pass
Oracle 1Z0-1072-20 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
NEW QUESTION 139
Which two are true for Oracle Cloud Infrastructure DNS? (Choose two.)
- A. It supports segregation of traffic by using the private pool.
- B. It supports other cloud providers such as AWS and Azure.
- C. It does not provide DDoS protection.
- D. It can function only as a primary DNS.
Answer: A,B
Explanation:
Explanation
References: B - Support for Oracle Cloud Infrastructure, other Cloud provider endpoints (AWS, Azure) and private assets, including Cloud, CDNs and Data CentersC - Customers may purchase Oracle Cloud Infrastructure Private Pool and Vanity Nameserver to have their Domain Names and Zones under a private IP pool with dedicated nameservers to segregate from those of other customers in order to reduce the risk of external issues affecting their websites.
https://www.oracle.com/cloud/networking/dns-faq.html
NEW QUESTION 140
You are about to upload a large log file (5 TIB size) to Oracle Cloud Infrastructure object storage and have decided to use multipart upload capability for a more efficient and resilient upload.
Which two statements are true about multipart upload? (Choose two.)
- A. While a multipart upload is still active, you cannot add parts even if the total number of parts is less than
10,000. - B. The maximum size for an uploaded object is 10 TiB.
- C. Individual object parts can be as small as 10 MiB or as large as 50 GiB.
- D. You do not have to commit the upload after you have uploaded all the object parts.
Answer: B,C
Explanation:
Explanation/Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/usingmultipartuploads.htm
NEW QUESTION 141
You deployed a web server in Oracle Cloud Infrastructure using an ephemeral public IP. After a few changes in your web server configuration, you rebooted the server and a new public IP was associated to your instance.
What should you do to prevent this from happening again?
- A. Create a reserved public IP and associate it with the hosts file of your web server
- B. Create a reserved public IP and associate it with the security list that your complete instance is using
- C. Create a reserved public IP and associate it with the subnet of your compute instance
- D. Create a reserved public IP and associate it with the VNIC of your compute instance
Answer: D
Explanation:
Explanation
A public IP address is an IPv4 address that is reachable from the internet. If a resource in your tenancy needs to be directly reachable from the internet, it must have a public IP address. Depending on the type of resource, there might be other requirements.
There are two types of public IPs:
Ephemeral: Think of it as temporary and existing for the lifetime of the instance.
Reserved: Think of it as persistent and existing beyond the lifetime of the instance it's assigned to. You can unassign it and then reassign it to another instance whenever you like. Exception: reserved public IPs on public load balancers.
To create a new reserved public IP in your pool
Confirm you're viewing the region and compartment where you want to create the reserved public IP.
Open the navigation menu. Under Core Infrastructure, go to Networking and click Public IPs.
Click Create Reserved Public IP.
Enter the following:
Name: An optional friendly name for the reserved public IP. The name doesn't have to be unique, and you can change it later. Avoid entering confidential information.
Compartment: Leave as is.
Tags:Optionally, you can apply tags. If you have permissions to create a resource, you also have permissions to apply free-form tags to that resource. To apply a defined tag, you must have permissions to use the tag namespace. For more information about tagging, see Resource Tags. If you are not sure if you should apply tags, skip this option (you can apply tags later) or ask your administrator.
Click Create Reserved Public IP.
To assign a reserved public IP to a private IP
Prerequisite: The private IP must not have an ephemeral or reserved public IP already assigned to it. If it does, first delete the ephemeral public IP, or unassign the reserved public IP.
Confirm you're viewing the compartment that contains the instance with the private IP you're interested in.
Open the navigation menu. Under Core Infrastructure, go to Compute and click Instances.
Click the instance to view its details.
Under Resources, click Attached VNICs.
The primary VNIC and any secondary VNICs attached to the instance are displayed.
Click the VNIC you're interested in.
Under Resources, click IP Addresses.
The VNIC's primary private IP and any secondary private IPs are displayed.
For the private IP you're interested in, click the Actions icon (three dots), and then click Edit.
In the Public IP Address section, for Public IP Type, select the radio button for Reserved Public IP.
Enter the following:
Compartment: The compartment that contains the reserved public IP you want to assign.
Reserved Public IP: The reserved public IP you want to assign. You have three choices:
Create a new reserved public IP. You may optionally provide a friendly name for it. The name doesn't have to be unique, and you can change it later. Avoid entering confidential information.
Assign a reserved public IP that is currently unassigned.
Move a reserved public IP from another private IP.
Click Update.
NEW QUESTION 142
Which two statements are true about Oracle Cloud Infrastructure (OCI) DB Systems Data Guard service?
- A. Data guard implementation for Bare Metal shapes requires two DB Systems, one containing the primary database and one containing the standby database.
- B. Data guard configuration on the OCI is limited to a virtual machine only
- C. Data guard implementation requires two DB Systems, one running the primary database on a virtual machine and the standby database running on bare metal.
- D. Both DB systems must use the same VCN, and port 1521 must be open
Answer: A,D
Explanation:
Explanation
An Oracle Data Guard implementation requires two DB systems, one containing the primary database and one containing the standby database. When you enable Oracle Data Guard for a virtual machine DB system database, a new DB system with the standby database is created and associated with the primary database. For a bare metal DB system, the DB system with the database that you want to use as the standby must already exist before you enable Oracle Data Guard.
Requirement details are as follows:
- Both DB systems must be in the same compartment.
- The DB systems must be the same shape type (for example, if the shape of the primary database is a virtual machine, then the shape of the standby database can be any other virtual machine shape).
- If your primary and standby databases are in different regions, then you must peer the virtual cloud networks (VCNs) for each database.
- Configure the security list ingress and egress rules for the subnets of both DB systems in the Oracle Data Guard association to enable TCP traffic to move between the applicable ports. Ensure that the rules you create are stateful (the default).
NEW QUESTION 143
Where is the tenancy Oracle Cloud Identifier (OCID) located?
- A. given by support on account creation
- B. contained within the compartment OCID
- C. at the bottom of every console page
- D. on the Identity - Users page
Answer: B
Explanation:
Explanation
Identity > Compartments >(The root Compartment of the tenancy)
NEW QUESTION 144
What does Terraform use to create, manage, and manipulate infrastructure resources?
- A. provisioner
- B. provider
- C. instances
- D. resources
Answer: B
Explanation:
Explanation
The Oracle Cloud Infrastructure provider is used to interact with the many resources supported by the Oracle Cloud Infrastructure. The provider needs to be configured with credentials for the Oracle Cloud Infrastructure account.
NEW QUESTION 145
Which statement Is true about Data Guard implementation in Oracle Cloud Infrastructure (OCI) bare metal and virtual machine database systems?
- A. Both database systems must be in the same compartment.
- B. Primary and standby databases must be in the same OCI region.
- C. Primary and standby database versions and editions need not be Identical.
- D. Database systems need not be the same shape type (e.g, primary database can be a virtual machine, and standby database a bare metal shape, and vice versa).
Answer: A
Explanation:
Reference:
https://docs.cloud.oracle.com/en-us/iaas/Content/Database/Tasks/exausingdataguard.htm
NEW QUESTION 146
You developed a microservices based application that runs on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). You want to provide access to this cluster to other team members.
What should you do to provide access to this cluster using as fewest steps as possible?
- A. Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Other team members should install oci cli and kubectl locally on their laptop. Use the oci cli to generate the kubeconfig and use kubectl to access the cluster.
- B. Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Other team members should use OCI Cloud Shell to generate the kubeconfig into their own cloud shell environment and access the cluster using kubectl from cloud shell.
- C. Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Create a cluster role and cluster role binding to provide access to the cluster for each team member. Other team members should install oci cli and kubectl locally on their laptop. Use the oci cli to generate the kubeconfig and use kubectl to access the cluster.
- D. Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Create individual users and access token for each team member. Other team members should use OCI Cloud Shell to generate the kubeconfig into their own cloud shell environment and access the cluster using kubectl from cloud shell.
Answer: D
NEW QUESTION 147
You have an Oracle Cloud Infrastructure (OCI) load balancer distributing traffic via an evenly-weighted round robin policy to your back-end web servers. You notice that one of your web servers is receiving more traffic than other web servers.
How can you resolve this to make sure traffic is evenly distributed across all back-end webservers?
- A. Create separate listeners for each backend web server.
- B. Disable cookie-based session persistence on your backend set.
- C. Disable SSL configuration associated with your backend set.
- D. Change keep-alive setting between the load balancer and backend server.
Answer: A
Explanation:
Reference:
https://docs.cloud.oracle.com/en-us/iaas/Content/Balance/Concepts/balanceoverview.htm
NEW QUESTION 148
Which statement is true about Oracle Cloud Infrastructure FastConnect?
- A. For private peering, FastConnect extends your existing infrastructure to a virtual cloud network
- B. The FastConnect provider network offers only 1 Gbps port connection speed increments
- C. For public peering, a dynamic routing gateway must be configured and attached to the virtual cloud network (VCN)
- D. For private peering, FastConnect extends your existing infrastructure to allow you to consume object storage from your on-premises data center
Answer: A
Explanation:
With FastConnect, you can choose to use private peering, public peering, or both.
Private peering: To extend your existing infrastructure into a virtual cloud network (VCN) in Oracle Cloud Infrastructure (for example, to implement a hybrid cloud, or a lift and shift scenario). Communication across the connection is with IPv4 private addresses (typically RFC 1918).
Public peering: To access public services in Oracle Cloud Infrastructure without using the internet. For example, Object Storage, the Oracle Cloud Infrastructure Console and APIs, or public load balancers in your VCN. Communication across the connection is with IPv4 public IP addresses. Without FastConnect, the traffic destined for public IP addresses would be routed over the internet.
NEW QUESTION 149
Which two statements about file storage service (FSS) are accurate? (Choose two.)
- A. FSS leverages UNIX user group and permission checking for file access security
- B. Identity and Access Management (IAM) controls which file systems are mountable by which instances
- C. Encryption of file system in FSS is optional
- D. Security lists can be used as a virtual firewall to prevent an instance from mounting an FSS mount target within the same subnet
- E. Data in transit to an FSS mount target is encrypted
Answer: A,E
Explanation:
All data is encrypted at rest. and In-transit encryption provides a way to secure your data between instances and mounted file systems using TLS v. 1.2 (Transport Layer Security) encryption.
File Storage service supports the AUTH_UNIX style of authentication and permission checking for remote NFS client requests.
NEW QUESTION 150
You want an Oracle Cloud Infrastructure (OCI) compute instance in your compartment to make API calls to other services within OCI without storing credentials in a configuration file.
What do you need to do?
- A. Instances cannot access services outside their compartment
- B. Create a dynamic group with appropriate matching rules to include the instance, and reference this group in your IAM policy statement
- C. By default, all VM instances are created with an instance principal. Reference this instance principal in your IAM policy statement
- D. VM instances are treated as users. Create a user, assign the user to that VM instance, and reference the instance in your Identity and Access Management (IAM) policy statement
Answer: B
NEW QUESTION 151
You are designing a lab exercise for your team that has a large number of graphics with large file sizes. The application becomes unresponsive if the graphics are embedded in the application. You have uploaded the graphics to Oracle Cloud Infrastructure and only added the URL in the application. You need to ensure these graphics are accessible without requiring any authentication for an extended period of time.
How can you achieve these requirements?
- A. Make the object storage bucket private and all objects public and use the URL found in the Object "Details".
- B. Make the object storage bucket public and use the URL found in the Object "Details".
- C. Create pre-authenticated requests (PAR) and specify 00:00:0000 as the expiration time.
- D. Create PARs and do not specify an expiration date.
Answer: B
Explanation:
Pre-authenticated requests provide a way to let you access a bucket or an object without having your own credentials. For example, you can create a request that lets you upload backups to a bucket without owning API keys.
When you create a bucket, the bucket is considered a private bucket and the access to the bucket and bucket contents requires authentication and authorization. However, Object Storage supports anonymous, unauthenticated access to a bucket. You make a bucket public by enabling read access to the bucket.
pre-authenticated requests have to select expiration date
NEW QUESTION 152
A customer wants to do development on premise while leveraging services such as Java Cloud, Mobile Developer Cloud, and App Builder Services. The customer would also like to scale out the application, stretching from on-premises to the cloud by using a common API.
Which two Infrastructure options can the customer leverage to do this? (Choose two.)
- A. Oracle Cloud Infrastructure
- B. Oracle Cloud Infrastructure Classic
- C. Oracle Cloud at Customer
- D. Oracle Cloud Ravello service
Answer: A,C
NEW QUESTION 153
You have setup your environment as shown below with the Mount Target "MT" successfully mounted on both compute instances CLIENT-X and CLIENT-Y.
For security reasons you want to control the access to the File System A in such a way that CLIENT-X has READ/WRITE and CLIENT-Y has READ only permission.
What you should do?
- A. Update the security list TWO to restrict CLIENT-Y access to read-only.
- B. Update the OS firewall in CLIENT-X to allow READ/WRITE access.
- C. Update the mount target export options to restrict CLIENT-Y access to read-only.
- D. Update the security list ONE to restrict CLIENT-Y access to read only.
Answer: D
NEW QUESTION 154
Which statement is true about Oracle Cloud Identifiers (OCID)?
- A. If you delete a user, and them create a new user with the same name, the user will be considered a different user because of different OCIDs.
- B. mytenancy.oc.ocid is a valid OCID.
- C. Users can customize OCIDs for all the resources in their compartments.
- D. If you delete a user, and then create a new user with the same name, the new user will be assigned the exact same OCIDs as the system remembers.
Answer: A
NEW QUESTION 155
Which two statements are true about Autonomous Data Warehouse (ADW) backup?
- A. You must backup ADW database to object storage bucket named ADW_backup
- B. You can perform manual backups to OCI object storage in addition to automated backups available on ADW
- C. You can backup ADW database only to a standard bucket type in OCI object storage
- D. Oracle Cloud Infrastructure (OCI) recommends backing up ADW databases manually to on-premises storage devices
Answer: B,C
Explanation:
Explanation
Autonomous Database automatically backs up your database for you.In addition to automatic backups Autonomous Database also allows you take manual backups to your Oracle Cloud Infrastructure Object Storage. for example if you want to take a backup before a major change to make restore and recovery faster.
Also, Manual backups are only supported with buckets created in the standard storage tier if you provision an Autonomous Data Warehouse instance named ADWC1, the bucket name should be backup_adwc1 (the bucket name is lowercase)
NEW QUESTION 156
......
Guaranteed Accomplishment with Newest Jan-2022 FREE: https://passcertification.preppdf.com/Oracle/1Z0-1072-20-prepaway-exam-dumps.html