Free 2024 1z0-1067-23 Dumps 100 Pass Guarantee With Latest Demo
Prepare 1z0-1067-23 Question Answers Free Update With 100% Exam Passing Guarantee [2024]
NEW QUESTION # 32
Your deployment platform within Oracle Cloud Infrastructure (OCI) leverages a compute instance with multiple block volumes attached. There are multiple teams that use the same compute instance and have access to these block volumes. You want to ensure that noone accidentally deletes any of these block volumes. You have started to construct the following IAM policy but need to determine which permissions should be used.
allow group DeploymentUsers to manage volume-family where ANY { request.permission != <???>, request.permission != <???>, request.permission != <???> } Which permissions can you use in place of <???> in this policy? (Choose the best answer.)
- A. VOLUME_DELETE, VOLUME_ATTACHMENT_DELETE, VOL-UME_BACKUP_DELETE
- B. DELETE_VOLUME, DELETE_VOLUME_ATTACHMENT, DE-LETE_VOLUME_BACKUP
- C. VOLUME_ERASE, VOLUME_ATTACHMENT_ERASE, VOL-UME_BACKUP_ERASE
- D. ERASE_VOLUME, ERASE_VOLUME_ATTACHMENT, ERASE_VOLUME_BACKUP
Answer: A
NEW QUESTION # 33
You have created an Autonomous Data Warehouse (ADW) service in your company Oracle Cloud Infrastructure (OCI) tenancy and you now have to load historical data into it. You have already extracted this historical data from multiple data marts and data warehouses. This data is stored in multiple CSV text files and these files are ranging in size from 25 MB to 20 GB. Which is the most efficient and error tolerant method for loading data into ADW? (Choose the best answer.)
- A. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA for each CSV file to copy the contents into the corresponding ADW database table.
- B. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using the web console upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA for each CSV file to copy the contents into the corresponding ADW database table.
- C. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute Data Pump Import for each CSV file to copy the contents into the corresponding ADW database table.
- D. Create the tables in the ADW database and then execute SQL*Loader for each CSV file to load the contents into the corresponding ADW database table.
Answer: A
NEW QUESTION # 34
The general syntax for an IAM policy is: Allow <identity_domain_name>/<subject> to <verb>
<resource-type> in <location> where <conditions> Which two are valid values for <verb>?
- A. create
- B. manage
- C. destroy
- D. read
- E. alter
Answer: B,D
NEW QUESTION # 35
Which technique does NOT help you get the optimal performance out of the Oracle Cloud Infrastructure (OCI) File Storage service? (Choose the best answer.)
- A. Limit access to the same Availability Domain (AD) as the File Storage service where possible.
- B. Right size compute instances from where file system is accessed based on their network capacity.
- C. Increase concurrency by using multiple threads, multiple clients, and multiple mount targets.
- D. Serialize operations to the file system to access consecutive blocks as much as possible.
Answer: D
NEW QUESTION # 36
You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:
- A. Create a Network Security Group (NSG), add a stateful rule to allow ingress access on port 443, and associate it with the instance that hosts the company website.
- B. You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet. Which action would you take to accomplish the task? (Choose the best answer.)
- C. Create an NSG, add a stateful rule to allow ingress access on port 443, and associate it with the public subnet that hosts the company website.
- D. In the default security list, add a stateful rule to allow ingress access on port 443.Create a new security list with a stateful rule to allow ingress access on port 443 and associate it with the public subnet.
Answer: A
NEW QUESTION # 37
Security Testing Policy describes when and how you may conduct certain types of security testing of Oracle Cloud Services, including vulnerability and penetration tests, as well as tests involving data scraping tools.
What does Oracle allow as part of this testing? (Choose the best answer.)
- A. Customers are allowed to test Oracle Cloud Infrastructure (OCI) hardware related to resources in their tenancy.
- B. Customers can simulate DoS attack scenarios as long as it restricted to the customer own environment.
- C. Customers can validate that their network resources are isolated from other customer resources.
- D. Customers are allowed to use their own testing and monitoring tools.
Answer: D
NEW QUESTION # 38
Scenario: 2 (Oracle Cloud-init and AutoScaling: Use cloud-init to Configure Apache on Instances in an Autoscaling Instance Pool) Scenario Description: (Hands-On Performance Exam Certification) You're deploying an Apache-based web application on OCI that requires horizontal autoscaling.
To configure instances upon provisioning, write a cloud-init script for Oracle Linux 8 that installs and enables Apache (httpd), and opens the firewall for HTTP on TCP port 80. Create aninstance configuration and include the cloud-init script in it. Use this instance configuration to create an instance pool and autoscaling configuration.
Pre-Configuration:
To fulfill this requirement, you are provided with the following:
Access to an OCI tenancy, an assigned compartment, and OCI credentials
A VCN Cloud-Init Challenge VCN with an Internet gateway and a public subnet. The security list for the subnet allows ingress via TCP ports 22 and 80 (SSH and HTTP). The route table forwards all egress to the Internet gateway.
Access to the OCI Console
Required IAM policies
An SSH key pair for the compute instance
Public Key
https://objectstorage.us-ashburn-1.oraclecloud.com/n/tenancyname/b/PBT_Storage/o/PublicKey.pub Private Key https://objectstorage.us-ashburn-1.oraclecloud.com/n/tenancyname/b/PBT_Storage/o/PKey.key Note: Throughout your exam, ensure to use assigned Compartment , User Name , and Region.
Complete the following tasks in the provisioned OCI environment:
Task 1(a): Develop the cloud-init Script:
Task 1(b): Use cloud-init to Configure Apache on Instances in an Autoscaling Instance Pool:
Answer:
Explanation:
See the solution below with Step by Step Explanation.
Explanation
Task 1(a): Develop the cloud-init Script:
Create a compute instance pbt_cloud_init_vm_01 with the following properties:
Shape: VM.Standard.A1.Flex instance with 1 OCPU and 6 GB memory
Image: Oracle Linux 8
Placement: Use any of the availability domains
Network:
Place in the public subnet Cloud-Init Challenge SNT
Assign a public IPv4
Use the SSH public key
Add a cloud-init script and perform the following:
Use yum or dnf to install httpd.
Use systemctl to enable and start httpd
Open the firewall to http:
sudo firewall-offline-cmd --add-service=http
systemctl restart firewalld
Mark Complete
Task 1(b): Use cloud-init to Configure Apache on Instances in an Autoscaling Instance Pool:
You're deploying an Apache-based web application on OCI that requires horizontal autoscaling.
To configure instances upon provisioning, write a cloud-init script for Oracle Linux 8 that installs and enables Apache (httpd), and opens the firewall for HTTP on TCP port 80. Create an instance configuration and include the cloud-init script in it. Use this instance configuration to create an instance pool and autoscaling configuration.
Task 2: Create an Autoscaling Instance Pool Including the cloud-init Script:
Create an instance configuration named pbt_cloud_init_config_01 with the following properties:
Shape: VM.Standard.A1.Flex instance with 1 OCPU and 6 GB memory
Image: Oracle Linux 8
Placement: Use any of the availability domains
Network:
Place in the public subnet Cloud-Init Challenge SNT
Assign a public IPv4
Use the SSH public key
Attach the cloud-init script created in Task 1
Create an instance pool named pbt_cloud_init_pool_01 with one instance by using the instance configuration pbt_cloud_init_config_01 Create and attach an autoscaling configuration named pbt_cloud_autoscaling_config_01 with the following settings:
Metric-based autoscaling
Cooldown: 300 second
Performance metric: CPU utilization
Scale-out rule:
Operator: Greater than (>)
Threshold: 75%
Number of instances to add: 1
Scale-in rule:
Operator: Less than (<)
Threshold: 25%
Number of instances to remove: 1
Scaling limits:
Minimum number of instances: 1
Maximum number of instances: 2
Initial number of instances: 1
Task 1: Develop the cloud-init script
In the main menu, go to Compute > Instances and click Create an Instance In the instance creation menu, enter the following details a. Name: Provide name given in the instructions b. Compartment: Use the assigned compartment c. Placement: Use any of the availability domains d. Image: Oracle Linux 8 e. Shape: VM.Standard.A1.Flex instance with 1 OCPU and 6 GB memory f. Network:
i. Place in the public subnet
ii. Assign a public IPv4
g. SSH keys: Upload or paste the provided SSH public key
h. Boot volume: Leave as default
i. Under advanced options, add the following cloud-init script:
#!/bin/shsudo dnf install httpd --assumeyes --quietsudo systemctl enable httpdsudo systemctl start httpdsudo firewall-offline-cmd --add-service=httpsystemctl restart firewalld j. Create the instance.
Task 2: Create an autoscaling instance pool including the cloud-init script
1. In the main menu, go to Compute > Instance Configurations. Click Create instance configuration.
a. In the instance configuration creation menu, enter the same details as before:
b. Name: Provide name given in the instruction/if not specified provide any name c. Compartment: Assigned compartment d. Placement: Use any of the availability domains e. Image: Oracle Linux 8 f. Shape: VM.Standard.A1.Flex instance with 1 OCPU and 6 GB memory g. Network:
i. Place in the public subnet
ii. Assign a public IPv4
h. SSH keys: Upload or paste the provided SSH public key
i. Boot volume: Leave as default
j. Under advanced options, add the following cloud-init script:
#!/bin/shsudo dnf install httpd --assumeyes --quietsudo systemctl enable httpdsudo systemctl start httpdsudo firewall-offline-cmd --add-service=httpsystemctl restart firewalld k. Create the instance configuration.
Task 2: In the main menu, go to Compute > Instance Pools. Click Create instance pool.
Enter the following details:
a. Name: Provide name given in the instruction/if not specified provide any name b. Compartment: Assigned compartment c. Instance configuration: Created in last step d. Number of instances: 1 e. Select any availability domain f. Leave fault domain unselected g. Primary VNIC: Provided VCN in the instructions h. Subnet: Public subnet i. Do not attach a load balancer j. Create the instance pool Task 3: In the main menu, go to Compute > Autoscaling Configurations. Click Create autoscaling configuration and enter the following details:
a. Name: Provide name given in the instruction/if not specified provide any name b. Compartment: Assigned compartment c. Instance Pool: Created in last step d. Select Metric-based autoscaling e. Autoscaling policy name: Does not matter f. Cooldown: 300 seconds g. Performance metric: CPU utilization h. Scale-out rule:
i. Operator: Greater than (>)
ii. Threshold: 75%
iii. Number of instances to add: 1
i. Scale-in rule:
i. Operator: Less than (<)
ii. Threshold: 25%
iii. Number of instances to remove: 1
j. Scaling limits:
i. Minimum number of instances: 1
ii. Maximum number of instances: 2
iii. Initial number of instances: 1
k. Create the autoscaling configuration.
NEW QUESTION # 39
You are asked to investigate a potential security risk on your company Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking through the audit logs for suspicious activity. How can you retrieve the audit logs using the OCI Command Line Interface (CLI)? (Choose the best answer.)
- A. oci audit event list --start-time $start-time -compartment-id $compartment-id
- B. oci audit event list --start-time $start-time -end-time $end-time -compartment-id $com-partment-id
- C. oci audit event list --start-time $start-time -end-time $end time -tenancy-id $tenancy id
- D. oci audit event list --end-time $end-time -compartment-id $compartment-id
Answer: B
NEW QUESTION # 40
Which option is NOT a possible return value for an OCI health check?
- A. TIMED_OUT
- B. UNREACHABLE
- C. REGEX_MISMATCH
- D. UNKNOWN
- E. INVALID_STATUS_CODE
Answer: B
NEW QUESTION # 41
Your company has restructured its HR department. As part of this change, you also need to re-organize the compartments within Oracle Cloud Infrastructure (OCI) to align them with the company's new organizational structure. The following change is required:
Compartment Team_x needs to be moved under a new parent compartment, Project_B The tenancy has the following policies defined for compartments Project_A and Project_B:
Policy1: Allow group G1 to manage instance-family in compartment HR:Project_A Policy2: Allow group G2 to manage instance-family in compartment HR:Project_B Which two statements describe the impacts after the compartment Team_x is moved? (Choose two.)
- A. Group G2 can now manage instance-families in compartment Project_A but not in compartment Team_x
- B. Group G1 can now manage instance-families in compartment Project_A but not in compartment Team_x
- C. Group G2 can now manage instance-families in compartment Project_B, compartment Project_A and compartment Team_X
- D. Group G2 can now manage instance-families in compartment Project_B and compart-ment Team_X
- E. Group G1 can now manage instance-families in compartment Project_A, compartment Project_B and compartment Team_X
Answer: B,D
NEW QUESTION # 42
You are asked to deploy a new application that has been designed to scale horizontally. The business stakeholders have asked that the application be deployed in us-phoenix-1. Nor-mal usage requires 2 OCPUs.
You expect to have few spikes during the week, that will require up to 4 OCPUs, and a major usage uptick at the end of each month that will require 8 OCPUs. What is the most cost-effective approach to implement a highly available and scalable solution? (Choose the best answer.)
- A. Create an instance with 1 OCPU shape. Use the Resize Instance action to scale up to a larger shape when more resources are needed.
- B. Create an instance pool with a VM.Standard2.1 shape instance configuration. Set up the autoscaling configuration to use 2 availability domains and have a minimum of 2 in-stances and a maximum of 8 instances.
- C. Create an instance pool with a VM.Standard2.2 shape instance configuration. Set up the autoscaling configuration to use 2 availability domains and have a minimum of 2 in-stances, to handle the weekly spikes, and a maximum of 4 instances.
- D. Create an instance with 1 OCPU shape. Use a CLI script to clone it when more re-sources are needed.
Answer: B
NEW QUESTION # 43
You have been contracted by a local e-commerce company to assist with enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet, and a database in a separate, private subnet. The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically. After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)
- A. Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A rec-ord. Inform customers to prepend the website URL with failover if the primary site is unavailable.
- B. Deploy a new load balancer in the primary region. Create one backend set for the primary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.
- C. Create a load balancer policy in the Traffic Management service. Configure one answer for each site.
Set the answer for the primary sitewith a weight of 10 and the answer for the secondary site with a weight of 100. - D. Create a failover policy in the Traffic Management service. Set the IP address of the public load balancer for the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.
Answer: D
NEW QUESTION # 44
You run a large global application with 90% of customers based in the US and Canada. You want to be able to test a new feature and allow a small percentage of users to access the new version of yourapplication. What Oracle Cloud Infrastructure Traffic Management steering policy should you utilize? (Choose the best answer.)
- A. Geolocation steering
- B. ASN steering
- C. Load Balancer
- D. IP Prefix steering
Answer: C
NEW QUESTION # 45
You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG:
NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:
However, after checking the bastion host logs, you discovered that there are IP addresses other than your own that can access your bastion host. What is the root cause of this issue? (Choose the best answer.)
- A. The Security List allows access to all IP address which overrides the Network Security Group ingress rules.
- B. All compute instances associated with NSG-050504 are also able to connect to the bastion host.
- C. The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.
- D. A netmask of /32 allows all IP address in the 140.19.2.0 network, other than your IP 140.19.2.140
Answer: B
NEW QUESTION # 46
You are using Oracle Cloud Infrastructure (OCI) console to set up an alarm on a budget to track your OCI spending. Which two are valid targets for creating a budget in OCI? (Choose two.)
- A. Select user as the type of target for your budget.
- B. Select Compartment as the type of target for your budget.
- C. Select Cost-Tracking Tags as the type of target for your budget.
- D. Select group as the type of target for your budget.
- E. Select Tenancy as the type of target for your budget.
Answer: B,C
NEW QUESTION # 47
You have the following compartment structure within yourcompany Oracle Cloud Infrastructure (OCI) tenancy:
You want to create a policy in the root compartment to allow SystemAdmins to manage VCNs only in CompartmentC. Which policy is correct? (Choose the best answer.)
- A. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentB:CompartmentC
- B. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentC
- C. Allow group SystemAdmins to manage virtual-network-family in compartment Root
- D. Allow group SystemAdmins to manage virtual-network-family in compartment Com-partmentA:CompartmentB:CompartmentC
Answer: D
NEW QUESTION # 48
The boot volume on your Oracle Linux instance has run out of space. Your application has crashed due to a lack of swap space, forcing you to increase the size of the boot volume. Which step should NOT be included in the process used to solve the issue? (Choose the best answer.)
- A. Resize the boot volume by specifying a larger value than the boot volume current size.
- B. Stop the instance and detach the boot volume.
- C. Attach the resized boot volume to a second instance asa data volume; extend the partition and grow the file system in the resized boot volume.
- D. Reattach the boot volume and restart the instance.
- E. Create a RAID 0 configuration to extend the boot volume file system onto another block volume.
Answer: E
NEW QUESTION # 49
......
Dumps Real Oracle 1z0-1067-23 Exam Questions [Updated 2024]: https://www.itexamreview.com/1z0-1067-23-exam-dumps.html
Free 1z0-1067-23 Exam Dumps to Pass Exam Easily: https://drive.google.com/open?id=1jcw5JhM47UylwUQLwo9m1OeUOHbTIY96
