[Mar 09, 2022] Lesson Brilliant PDF for the 1z0-1072-21 Tests Free Updated Today
Get New 2022 Valid Practice Oracle Cloud Solutions Infrastructure 1z0-1072-21 Q&A - Testing Engine
NEW QUESTION 97
You deployed a web server in Oracle Cloud Infrastructure using an ephemeral public IP. After a few changes in your web server configuration, you rebooted the server and a new public IP was associated to your instance.
What should you doto prevent this from happening again?
- A. Create a reserved public IP and associate it with the hosts file of your web server
- B. Create a reserved public IP and associate it with the security list that your complete instance is using
- C. Create a reserved public IP and associate it with the subnet of your compute instance
- D. Create a reservedpublic IP and associate it with the VNIC of your compute instance
Answer: D
Explanation:
Explanation
A public IP address is an IPv4 address that is reachable from the internet. If a resourcein your tenancy needs to be directly reachable from the internet, it must have a public IP address. Depending on the type of resource, there might be other requirements.
There are two types of public IPs:
Ephemeral: Think of it as temporary and existingfor the lifetime of the instance.
Reserved: Think of it as persistent and existing beyond the lifetime of the instance it's assigned to. You can unassign it and then reassign it to another instance whenever you like. Exception: reserved public IPs on public load balancers.
To create a new reservedpublic IP in your pool
Confirm you're viewing the region and compartment where you want to create the reserved public IP.
Open the navigation menu. Under Core Infrastructure, go to Networking and click Public IPs.
Click Create Reserved Public IP.
Enter the following:
Name: An optional friendly name for the reserved public IP. The name doesn't have to be unique, and you can change it later. Avoid entering confidential information.
Compartment: Leave as is.
Tags:Optionally, you can apply tags. If you have permissionsto create a resource, you also have permissions to apply free-form tags to that resource. To apply a defined tag, you must have permissions to use the tag namespace. For more information about tagging, see Resource Tags. If you are not sure if you should apply tags, skip this option (you can apply tags later) or ask your administrator.
Click Create Reserved Public IP.
To assign a reserved public IP to a private IP
Prerequisite: The private IP must not have an ephemeral or reserved public IP already assigned to it. If it does, first delete the ephemeral public IP, or unassign the reserved public IP.
Confirm you're viewing the compartment that contains the instance with the private IP you're interested in.
Open the navigation menu. Under Core Infrastructure, go to Compute and click Instances.
Click the instance to view its details.
Under Resources, click Attached VNICs.
The primary VNIC and any secondary VNICs attached to the instance are displayed.
Click the VNIC you're interested in.
Under Resources, click IP Addresses.
The VNIC's primary private IP and any secondary private IPs are displayed.
For the private IP you're interested in, click the Actions icon (three dots), and then click Edit.
In the Public IP Address section, for Public IP Type, select the radio button for Reserved Public IP.
Enter the following:
Compartment: The compartment that contains the reserved public IP you want to assign.
Reserved Public IP: The reserved public IP you want to assign. You have three choices:
Create a new reserved public IP. You may optionally provide a friendly name for it. The name doesn't have to be unique, and you can change it later. Avoid entering confidential information.
Assign a reserved public IP that is currently unassigned.
Move a reserved publicIP from another private IP.
Click Update.
NEW QUESTION 98
You are an administrator with an application running in Oracle Cloud Infrastructure (OCI). The company has a fleet of OCI compute virtual instances behind an load balancer. The load balancer backend set health check API is providing a 'Critical' level warning. You haveconfirmed that your application Is running healthy on the backend servers. What Is the possible reason for this 'Critical' warning?
- A. The load balancer listener is not configured correctly.
- B. A user does not have correct Identity and Access Management (IAM) credentials on the backend servers.
- C. The security list associated with the subnet In which the backend server is provisioned does not include the IP range for the source of the health check requests.
- D. The route table associated with the subnet in which the backend server is provisioned does not include the route for the OCI load balancer.
Answer: C
NEW QUESTION 99
You are designing a high bandwidth, redundant connection between your data center and Oracle Cloud Infrastructure (OCI). While researching for OCI FastConnect locations,you notice that you are co-located with Oracle at one of the Oracle FastConnect locations in the Ashburn region.
What is the recommended design in this scenario?
- A. Setup two IPsec connections between your data center and OCI Ashburn region. Create a OCI load balancer to distribute the traffic across the two connections.
- B. Create a cross-connect group and have two or more cross-connects in that group. Create an IPsec VPN connection on this group.
- C. Create a cross-connect group and have at least one cross-connect in that group. Create at least one virtual circuit in the group.
- D. Create a cross-connect group and have at least two ormore cross-connects in that group. Create at least two or more virtual circuits in the group.
Answer: D
Explanation:
Explanation
You could havemultiple private virtual circuits, for example, to isolate traffic from different parts of your organization (one virtual circuit for 10.0.1.0/24; another for 172.16.0.0/16), or to provide redundancy.
NEW QUESTION 100
Whichthree types of credentials are used to manage Oracle Cloud Infrastructure Identity and Access Management (IAM)? (Choose three.)
- A. Windows Password
- B. Console Password
- C. API Signing Key
- D. SSH Key
- E. Swift Password
Answer: B,C,E
Explanation:
Explanation
References:https://cloud.oracle.com/iaas/whitepapers/best-practices-for-iam-on-oci.pdfYou manage the following types of credentials with Oracle Cloud Infrastructure IAM:Console password: For signing in to the Console, which is the user interface for interacting with Oracle Cloud InfrastructureAPI signing key (in PEM format): For sending API requests, which require authenticationSwift password: For using a Swift client with Recovery Manager (RMAN) to back up an Oracle Database System (DB System) database to Object Storage
NEW QUESTION 101
Which two statements are true about an Oracle Cloud Infrastructure object storage bucket? (Choose two.)
- A. You can associate a bucket with only a single compartment
- B. You can associate a bucket with multiple compartments
- C. You cannot change a bucket from private topublic after it is created
- D. You cannot edit or append data to an object, but you can replace the entire object
Answer: A,D
Explanation:
Explanation
A bucket is associated with a single compartment.
You can't edit or append data to an object, but you can replace the entire object.
NEW QUESTION 102
Which two identityproviders can your administrator federate with Oracle Cloud Infrastructure? (Choose two.)
- A. AWS Directory Services
- B. Oracle Identity Cloud Services
- C. Microsoft Active Directory
- D. Google Directory Federation Services
Answer: B,C
Explanation:
Explanation
References:
Oracle Cloud Infrastructure supports federation with Oracle Identity Cloud Service and Microsoft Active Directory (via Active Directory Federation Services (AD FS)), and any identity provider that supports the Security Assertion Markup Language (SAML) 2.0 protocol.
NEW QUESTION 103
Which two statements are true about the Oracle Cloud Infrastructure Object Storage Service? (Choose two.)
- A. It provides strong consistency.
- B. Data is stored redundantly across multiple availabilitydomains (ADs) in a multi-AD region.
- C. Data is stored redundantly only in a single AD.
- D. It can be directly attached or detached from a compute instance.
- E. It provides higher IOPS than Block Storage.
Answer: A,B
Explanation:
Explanation
STRONG CONSISTENCYWhen a read request is made, Object Storage always serves the most recent copy of the data that was written to the system.DURABILITYObject Storage is aregional service. Data is stored redundantly across multiple storage servers. Object Storage actively monitors data integrity using checksums and automatically detects and repairs corrupt data. Object Storage actively monitors and ensures data redundancy.If a redundancy loss is detected, Object Storage automatically creates more data copies. For more details about Object Storage durability, see the Oracle Cloud Infrastructure Object Storage FAQ.CUSTOM METADATAYou can define your own extensive metadata as key-value pairs for any purpose. For example, you can create descriptive tags for objects, retrieve those tags, and sort through the data. You can assign custom metadata to objects and buckets using the Oracle Cloud Infrastructure CLI or SDK. See Software Development Kits and Command Line Interface for details.ENCRYPTIONObject Storage employs 256-bit Advanced Encryption Standard (AES-256) to encrypt object data on the server. Each object is encrypted with its own key. Data encryption keys are encryptedwith a master encryption key that is frequently rotated.
Encryption is enabled by default and cannot be turned off.
NEW QUESTION 104
Which two statements are true about Database Cloud Service (DBCS)? (Choose two.)
- A. You cannot manage the database as sys/sysdba.
- B. Data Guard as a Service is offered among regions.
- C. You can manageOracle parameters at a global system level.
- D. You have full control over backup schedule and retention.
Answer: C,D
Explanation:
Explanation
References:https://cloud.oracle.com/database/faq#backup
Can I set up Data Guard across Availability Domains?Yes, you can set up Data Guard in the same or different Availability Domains in a region. However, Oracle recommends that you set up your Data Guard configuration across Availability Domains.Can I set up Data Guard across Oracle Cloud Infrastructure regions?Yes, you can set up Data Guard across regions,
"but the Database Cloud Service Data Guard feature currently does not support it. " You can manually set up Data Guard across regions by logging on to your host and using DGMGRL. You must enable an internet gateway on the primary and standby DB system VCN for Data Guard to transport logs across regions. Learn more about DGMGRL.
To configure a Data Guard system across regions or between on-premises and Oracle Cloud Infrastructure DB systems, you must access the database host directly and use the DGMGRL utility.
https://docs.cloud.oracle.com/iaas/Content/Database/Tasks/usingdataguard.htm
NEW QUESTION 105
Which two configuration formats does Terraform support? (Choose two.)
- A. YAML
- B. HCL
- C. JSON
- D. XML
Answer: B,C
Explanation:
Explanation
References:
Terraform configuration filescan use either of two formats: Terraform domain-specific language (HashiCorp Configuration Language format [HCL]), which is the recommended approach, or JSON format if the files need to be machine-readable.
NEW QUESTION 106
You must implement a backup solution for your AutonomousData Warehouse (ADW) that will enable you to restore data as old as one year with a recovery point objective (RPO) of 10 days.
Which database backup strategy would you select?
- A. Take monthly manual backups to supplement the automated backups and preserve them for 12 months.
- B. Take weekly manual backups to supplement the automated backups and preservethem for 12 months.
- C. Take quarterly manual backups to supplement the automated backups and preserve them for 12 months.
- D. Use the automated backups.
Answer: D
Explanation:
Explanation
Oracle Cloud Infrastructure automatically backs up your Autonomous Databases and retains these backups for
60 days. Automatic backups are weekly full backups and daily incremental backups. You can also create manual backups to supplement your automatic backups. Manual backups are stored in an Object Storage bucket that you create, and are retained for 60 days The retention period for manual backups is the same as automatic backups which is 60 days. So we cannot preserve the backup for 12 months
https://docs.oracle.com/en/cloud/paas/autonomous-data-warehouse-cloud/user/backup-manual.html#GUID-D95E
NEW QUESTION 107
Which two statements are true regarding cloning a block volume?
- A. You can change the block volume size when creating a clone
- B. You can skip block volume encryption when creating a clone
- C. You can change the block volume performance when creating a clone
- D. You can clone block volumes across regions
Answer: A,C
Explanation:
Explanation
Youcan create a clone from a volume using the Block Volume service. Cloning enables you to make a copy of an existing block volume without needing to go through the backup and restore process.
A cloned volume is a point-in-time direct disk-to-disk deep copyof the source volume, so all the data that is in the source volume when the clone is created is copied to the clone volume.
You can only create a clone for a volume within the same region, availability domain and tenant. You can create a clone for a volumebetween compartments as long as you have the required access permissions for the operation.
during create a clone you can do the following
If you want to clone the block volume to a larger size volume, check Custom Block Volume Size (GB) and then specifythe new size. You can only increase the size of the volume, you cannot decrease the size. If you clone the block volume to a larger size volume, you need to extend the volume's partition. See Extending the Partition for a Block Volume for more information.
If you want to change the elastic performance setting when cloning the volume, check Custom Block Volume Performance and select the elastic performance setting you want the volume clone to use. See Block Volume Elastic Performance for more information. You can also change the elastic performance setting after you have cloned the volume, see Block Volume Elastic Performance. If you leave Custom Block Volume Performance unchecked, the cloned volume will use the same elastic performance setting as the source volume.
NEW QUESTION 108
Which three are valid Terraform configuration components? (Choose three.)
- A. data source
- B. instance
- C. resource
- D. metadata
- E. region
- F. variable
Answer: A,C,F
NEW QUESTION 109
Which two resources are availability domain constructs? (Choose two.)
- A. Groups
- B. Object Storage
- C. Block Volume
- D. ComputeInstance
- E. VCN
Answer: C,D
Explanation:
Explanation
References:https://docs.cloud.oracle.com/iaas/Content/General/Concepts/regions.htm#one
NEW QUESTION 110
Which certificate format is used with the load balancer?
- A. CRT
- B. PEM
- C. PKCS12
- D. PFX
Answer: B
Explanation:
Explanation
https://docs.cloud.oracle.com/iaas/Content/Balance/Tasks/managingcertificates.htm
NEW QUESTION 111
Which two statements are true about Oracle Cloud Infrastructure (OCI) DB Systems?
- A. Customers can consolidate multiple database homes on asingle virtual machine database host.
- B. Customers have no control over database patching.
- C. Customers can manage the TDE Wallet after DB Systems is provisioned.
- D. The database and backups are encrypted by default.
Answer: C,D
Explanation:
All databases created in Oracle Cloud Infrastructure are encrypted using transparent data encryption (TDE).
Oracle Cloud Infrastructure encrypts all managed backups in the object store. Oracle uses the Database Transparent Encryption feature by default for encrypting the backups. and the customers can manage the TDE Wallet after DB Systems are provisioned.
NEW QUESTION 112
For a compute instancethat is launched in a private subnet in a Virtual Cloud Network (VCN), which action needs to be performed to connect to the Internet, assuming that the required security list is properly set up?
- A. Create and configure Network Address Translation (NAT) in a public subnet and route all traffic to it.
- B. Assign a Public IP address to the compute instance.
- C. There is no way for an instance in a private subnet to connect to the Internet.
- D. Create a default route entry in the route table to forward all traffic to the Internet gateway.
Answer: D
NEW QUESTION 113
An Oracle Cloud Infrastructure tenancy administrator is not able to delete a user in the tenancy.
What can cause this issue?
- A. User has multi-factor authentication (MFA) enabled.
- B. User needs to be deleted from federation Identity Provider (IdP)before deleting from IAM.
- C. User is member of an Identity and Access Management (IAM) group.
- D. Users can be blocked but not deleted.
Answer: A
NEW QUESTION 114
You have five different company locations spread across the US. For a proof-of-concept (POC) you need to setup secure and encrypted connectivity to your workloads running in a single virtual cloud network (VCN) in the Oracle Cloud Infrastructure Ashburn region from all company locations.
What would meet this requirement?
- A. Create five IPsec connections with each company location and terminate those connections on a singleDRG. Attach that DRG to your VCN.
- B. Create five internet gateways in your VCN and have separate route table for each internet gateway.
- C. Create five virtual circuits using FastConnect for each company location and terminate those connections on a single dynamic routing gateway (DRG). Attach that DRG to your VCN.
- D. Create five IPsec VPN connections with each company location and terminate those connections on five separate DRGs. Attach those DRGs to your VCN.
Answer: A
Explanation:
Explanation
Access to Your On-Premises Network
There are two ways toconnect your on-premises network to Oracle Cloud Infrastructure:
VPN Connect: Offers multiple IPSec tunnels between your existing network's edge and your VCN,by way of a DRG that you create and attach to your VCN.
Oracle Cloud Infrastructure FastConnect: Offers a private connection between your existing network's edge and Oracle Cloud Infrastructure. Traffic does not traverse the internet. Both private peering and public peering are supported. That means your on-premises hosts can access private IPv4 addresses in your VCN as well as regional public IPv4 addresses in Oracle Cloud Infrastructure (for example, Object Storage or public load balancers in your VCN).
You can use one or both types of the preceding connections. If you use both, you can use them simultaneously, or in a redundant configuration. These connections come to your VCN by way of a single DRG that you create and attach to your VCN. Without that DRG attachment and a route rule for the DRG, traffic does not flow between your VCN and on-premises network. At any time, you can detach the DRG from your VCN but maintain all the remaining components that form the rest of the connection. You could then reattach the DRG again, or attach it to another VCN.
NEW QUESTION 115
Which two statements are true about restoring a volume from a block volume backup in Oracle Cloud Infrastructure Block Volume service?
- A. You can restore only one volume from a manual block volume backup.
- B. You can only restore a volume to the same availability domain in which the original block volume resides.
- C. You can restore a block volume backup to a larger volume size.
- D. You can restore a volumefrom any full volume backup but not from an Incremental backup.
- E. You can restore a volume to any availability domain within the same region where the backup is stored.
Answer: C,E
Explanation:
Explanation
Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Block/Tasks/restoringavolumefromabackup.htm
NEW QUESTION 116
You have an application running on Oracle Cloud Infrastructure. You identified that the read and write operations are slowing your applicationdown enough to impair user access. The application is currently using a VM.Standard 1.2 compute without any block storage attached to it.
Which two options allow you to increase disk performance? (Choose two.)
- A. Create a backup of the boot volume. Create a new compute instance using a VM Dense IO shape and restore the backup.
- B. Terminate the compute instance preserving the boot volume. Create a new compute instance using a VM Standard shape and attach a new block volume to host your application.
- C. Terminate the compute instance and create a backup of the boot volume. Create a new compute instance using aVM Dense IO shape and restore the backup.
- D. Terminate the compute instance preservingthe boot volume. Create a new compute instance using a VM Dense IO shape using the boot volume preserved.
Answer: B,D
Explanation:
Explanation
You can permanently terminate (delete) instances that you no longer need.By default, the instance's boot volume is deleted when you terminate the instance, however you can preserve the boot volumeassociated with the instance, so that you can attach it to a different instance as a data volume, or use it to launch a new instance.
You can use a boot volume backup to create an instance or you can attach it to another instance as a data volume. Howeverbefore you can use a boot volume backup, you need to restore it to a boot volume.
NEW QUESTION 117
You are the Cloud Architect of a company, and are designing a solution on Oracle Cloud Infrastructure where you want tohave all your compute instances resistant to hardware failure.
Which two are recommended best practices to achieve the requirement on Oracle Cloud Infrastructure?
(Choose two.)
- A. Attach block volumes from different Availability Domains to compute instances in different Availability Domains for high availability.
- B. Create backups of your block volumes that are associated with compute instances in different regions.
- C. Create a custom image of your system drive each time you change the image.
- D. Design your system with redundant compute modes in different Availability Domains to support the failover capability.
Answer: C,D
Explanation:
Explanation
References:https://docs.cloud.oracle.com/iaas/Content/Compute/References/bestpracticescompute.htm System ResilienceOracle Cloud Infrastructure runs on Oracle's high-quality Sun servers. However, any hardware can experience a failure. Follow industry-wide hardware failure bestpractices to ensure the resilience of your solution. Some best practices include:
Design your system with redundant compute nodes in different availability domains to support fail-over capability.Create a custom image of your system drive each time you change the image.Back up your data drives, or sync to spare drives, regularly.If you experience a hardware failure and have followed these practices, you can terminate the failed instance, launch your custom image to create a new instance, and then apply the backup data.
NEW QUESTION 118
Which storage would you use if your big data workload requires shared access and an NFS based interface?
- A. Object Storage
- B. Storage Software Cloud Appliance
- C. Block Volume
- D. Archive Storage
- E. File Storage
Answer: E
Explanation:
Explanation
References:https://docs.cloud.oracle.com/iaas/Content/File/Concepts/filestorageoverview.htm The File Storage service is designed to meet the needs of applications and users that need an enterprise file system across a widerange of use cases, including the following:
General Purpose File Storage: Access to an unlimited pool of file systems to manage growth of structured and unstructured data.
Big Data and Analytics: Run analytic workloads and use shared file systems to storepersistent data.
Lift and Shift of Enterprise Applications: Migrate existing Oracle applications that need NFS storage, such as Oracle E-Business Suite and PeopleSoft.
Databases and Transactional Applications: Run test and development workloads with Oracle, MySQL, or other databases.
Backups, Business Continuity, and Disaster Recovery: Host a secondary copy of relevant file systems from on premises to the cloud for backup and disaster recovery purposes.
MicroServices and Docker: Deliver stateful persistence for containers. Easily scale as your container-based environments grow.
NEW QUESTION 119
Which deployment architecture is offered when you deploy the Platform Service Manager based Database Cloud Service (DBCS) onto Oracle Cloud Infrastructure?
- A. Two node Primary RAC database leveraging ACFS for the shared file system
- B. Two node Primary RAC database with a two node RAC Data Guard Standby inMaximum Performance mode
- C. Single Instance database with a Single Instance Data Guard in Maximum Performance mode
- D. Single Instance database with a Single Instance Data Guard in Maximum Protection mode
Answer: B
NEW QUESTION 120
......
1z0-1072-21 Dumps PDF - 100% Passing Guarantee: https://www.actual4labs.com/Oracle/1z0-1072-21-actual-exam-dumps.html