1Z0-1067-21 PDF Pass Leader, 1Z0-1067-21 Latest Real Test
Valid 1Z0-1067-21 Test Answers & 1Z0-1067-21 Exam PDF
NEW QUESTION 30
You have received an email from your manager to provision new resources on Oracle Cloud Infrastructure (OCI). When researching OCI, you determined that you should use OCI Resource Manager. Since this is a task that will be done multiple times for development, test, and production. You will need to create a command that can be re-used.
Which CLI command can be used in this situation? (Choose the best answer.)
- A. oci resource-manager stack update --compartment-id <compartment_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name "Production stack build" \
--description Creating new Production environment - B. oci resource-manager stack create --compartment-id <compartment_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name Production stack build \
--description Creating new Production environment - C. oci resource-manager stack create --tenancy-id <tenancy_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name Production stack build \
--description Creating new Production environment - D. oci resource-manager stack update --tenancy-id <tenancy_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name "Production stack build" \
--description Creating new Production environment
Answer: B
NEW QUESTION 31
You have been contracted by a local e-commerce company to assist with enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet, and a database in a separate, private subnet.
The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically.
After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)
- A. Create a load balancer policy in the Traffic Management service. Configure one answer for each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.
- B. Deploy a new load balancer in the primary region. Create one backend set for the primary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.
- C. Create a failover policy in the Traffic Management service. Set the IP address of the public load balancer for the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.
- D. Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A record. Inform customers to prepend the website URL with failover if the primary site is unavailable.
Answer: B
NEW QUESTION 32
A subscriber of an Oracle Cloud Infrastructure (OCI) Notifications service topic complained about not receiving messages from the service.
Which option can help you debug this issue? (Choose the best answer.)
- A. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service drops the message. Confirm that the subscriber is always online to receive messages to help debug the issue.
- B. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to two hours. Configure an alarm on the NumberOfNotificationFailed metric through the OCI Monitoring service to help debug the issue.
- C. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, check the NumberOfNotificationFailed metric through the OCI Monitoring service for failed messages. Copy these messages to an OCI Object Storage bucket. Make sure the subscriber has the required credentials to access this bucket to help debug the issue.
- D. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to one day. Make sure that the subscriber is online at least once a day to help debug the issue.
Answer: B
Explanation:
https://www.oracle.com/devops/notifications/faq/
When a subscriber's endpoint doesn't acknowledge receipt of a message, the service retries delivery and currently retains the message up to two hours from the time the message is published to a topic. The service tries to deliver messages within the retention window.
NEW QUESTION 33
One of the compute instances that you have deployed on Oracle Cloud Infrastructure (OCI) is malfunctioning.
You have created a console connection to remotely troubleshoot it.
Which two statements about console connections are TRUE? (Choose two.)
- A. It is not possible to use VNC console connections to connect to Bare Metal Instances.
- B. It is not possible to connect to the serial console to an instance running Microsoft Windows, however VNC console connection can be used.
- C. VNC console connection uses SSH port forwarding to create a secure connection from your local system to the VNC server attached to your instance's console.
- D. If you do not disconnect from the session, your serial console connection will automatically be terminated after 24 hours.
- E. For security purpose, the console connection will not let you edit system configuration files.
Answer: C,D
NEW QUESTION 34
Here is a partial code from a Terraform template written for Oracle Cloud Infrastructure (OCI):
What operation(s) does it perform? (Choose the best answer.)
- A. Provides object read and write access for an OCI Object Storage bucket.
- B. Creates a URL to provide access to an OCI Object Storage bucket for managing objects.
- C. Creates a pre-authenticated request for objects in an OCI Object Storage bucket.
- D. Creates a lifecycle policy for an OCI Object Storage bucket for moving data to Archival storage at a specified time.
Answer: C
NEW QUESTION 35
One of your development teams has asked for your help to standardize the creation of several compute instances that must be provisioned each day of the week. You initially write several Command Line Interface (CLI) commands with all appropriate configuration parameters to achieve this task later determining this method lacks flexibility.
Which command generates a JSON-based template that Oracle Cloud Infrastructure (OCI) CLI can use to provision these instances on a regular basis? (Choose the best answer.)
- A. oci compute instance launch - -generate-full-command-json-input
- B. oci compute instance create - -generate-cli-skeleton
- C. oci compute instance launch - -generate-cli-skeleton
- D. oci compute provision-instance - -generate-full-command-json-input
Answer: A
Explanation:
https://docs.oracle.com/en-us/iaas/tools/oci-cli/3.0.5/oci_cli_docs/oci.html#cmdoption-generate-full-command-json-input
NEW QUESTION 36
You have ordered two FastConnect connections that provide a high availability connection architecture between your on-premises data center and Oracle Cloud Infrastructure (OCI). You want to run these connections in an ACTIVE/PASSIVE architecture.
How can you accomplish this? (Choose the best answer.)
- A. Enable BGP on the FastConnect that you want as the ACTIVE connection.
- B. Adjust one of the connections to have a higher ASN.
- C. Use AS PATH prepending with your routes.
- D. Decrease the prefix length of AS for the FastConnect you want to use as PASSIVE connection.
Answer: C
NEW QUESTION 37
You created an Oracle Linux compute instance through the Oracle Cloud Infrastructure (OCI) management console then immediately realize you forgot to add an SSH key file. You notice that OCI compute service provides instance console connections that supports adding SSH keys for a running instance. Hence, you created the console connection for your Linux server and activated it using the connection string provided. However, now you get prompted for a username and password to login.
What option should you recommend to add the SSH key to your running instance, while minimizing the administrative overhead? (Choose the best answer.)
- A. You need to modify the serial console connection string to include the identity file flag, -i to specify the SSH key to use.
- B. You need to configure the boot loader to use ttyS0 as a console terminal on the VM.
- C. You need to reboot the instance from the console, boot into the bash shell in maintenance mode, and add SSH keys for the opc user.
- D. You need to terminate the running instance and recreate it by providing the SSH key file.
Answer: A
NEW QUESTION 38
You are working as a Cloud Operations Administrator for your company. They have different Oracle Cloud Infrastructure (OCI) tenancies for development and production workloads. Each tenancy has resources in two regions - uk-london-1 and eu-frankfurt-1. You are asked to manage all resources and to automate all the tasks using OCI Command Line Interface (CLI).
Which is the most efficient method to manage multiple environments using OCI CLI? (Choose the best answer.)
- A. Run oci setup config to create new credentials for each environment every time you want to access the environment.
- B. Use OCI CLI profiles to create multiple sets of credentials in your config file, and reference the appropriate profile at runtime.
- C. Use different bash terminals for each environment.
- D. Create environment variables for the sets of credentials that align to each combination of tenancy, region, and environment.
Answer: B
NEW QUESTION 39
You have received an email from your manager to provision new resources on Oracle Cloud Infrastructure (OCI). When researching OCI, you determined that you should use OCI Resource Manager. Since this is a task that will be done multiple times for development, test, and production. You will need to create a command that can be re-used.
Which CLI command can be used in this situation? (Choose the best answer.)
- A. oci resource-manager stack update --compartment-id <compartment_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name "Production stack build" \
--description Creating new Production environment - B. oci resource-manager stack create --compartment-id <compartment_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name Production stack build \
--description Creating new Production environment - C. oci resource-manager stack create --tenancy-id <tenancy_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name Production stack build \
--description Creating new Production environment - D. oci resource-manager stack update --tenancy-id <tenancy_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name "Production stack build" \
--description Creating new Production environment
Answer: B
Explanation:
https://docs.oracle.com/en-us/iaas/tools/oci-cli/3.0.2/oci_cli_docs/cmdref/resource-manager/stack/create.html
NEW QUESTION 40
You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:
You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet.
Which action would you take to accomplish the task? (Choose the best answer.)
- A. Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the instance that hosts the company website.
- B. In default security list, add a stateful rule to allow ingress access on port 443.
- C. Create a new security list with a stateful rule to allow ingress access on port 443 and associate it to the public subnet.
- D. Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the public subnet that hosts the company website.
Answer: A
NEW QUESTION 41
You have ordered two FastConnect connections that provide a high availability connection architecture between your on-premises data center and Oracle Cloud Infrastructure (OCI). You want to run these connections in an ACTIVE/PASSIVE architecture.
How can you accomplish this? (Choose the best answer.)
- A. Enable BGP on the FastConnect that you want as the ACTIVE connection.
- B. Adjust one of the connections to have a higher ASN.
- C. Use AS PATH prepending with your routes.
- D. Decrease the prefix length of AS for the FastConnect you want to use as PASSIVE connection.
Answer: C
Explanation:
Explanation/Reference: https://docs.oracle.com/en-us/iaas/Content/Resources/Assets/whitepapers/connectivity- redundancy-guide.pdf (5)
NEW QUESTION 42
You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG: NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:
However, after checking the bastion host logs, you discovered that there are IP addresses other than your own that can access your bastion host.
What is the root cause of this issue? (Choose the best answer.)
- A. The Security List allows access to all IP address which overrides the Network Security Group ingress rules.
- B. A netmask of /32 allows all IP address in the 140.19.2.0 network, other than your IP 140.19.2.140
- C. All compute instances associated with NSG-050504 are also able to connect to the bastion host.
- D. The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.
Answer: C
NEW QUESTION 43
You have set an alarm to be generated when the CPU usage of a specified instance is greater than 10%. In the alarm behavior view below you notice that the critical condition happened around 23:30. You were expecting a notification after 1 minute, however, the alarm firing state did not begin until 23:33.
What should you change to fix it? (Choose the best answer.)
- A. Change the alarm's trigger delay minutes value to 1.
- B. Change the alarm condition to be grater than 3%.
- C. Change the notification topic that you previously associated with the alarm.
- D. Change the alarm's metric interval to 1.
Answer: A
NEW QUESTION 44
Which option contains the essential components of the Oracle Cloud Infrastructure Notifications service? (Choose the best answer.)
- A. An ALARM with a name unique across the tenancy, a SUBSCRIPTION, and a METRIC with the measurement of interest.
- B. An ALARM with a name unique across the compartment, a SUBSCRIPTION, and a METRIC with the measurement of interest.
- C. A TOPIC with a name unique across the tenancy, a SUBSCRIPTION, and a MESSAGE where content is published.
- D. A TOPIC with a name unique across the compartment, a SUBSCRIPTION, and a MESSAGE where content is published.
Answer: B
NEW QUESTION 45
You have a web application running on Oracle Cloud Infrastructure (OCI) that lets users log in with a username and password. You notice that an attacker has tried to use SQL comment "--" to alter the database query, remove the password check and log in as a user. You decide to prevent any future attacks.
Which of the following OCI services or features would you choose to safeguard your application? (Choose the best answer.)
- A. Data Safe
- B. Vault
- C. Web Application Framework (WAF)
- D. Network Security Group
Answer: B
NEW QUESTION 46
What is a key benefit of using Oracle Cloud Infrastructure's Resource Manager for your Terraform provisioning and management activities? (Choose the best answer.)
- A. Resource Manager has administrative privileges by design. Even if your IAM user does not have access, you can leverage Resource Manager to provision new resources to any compartment in the Tenancy.
- B. You can use Resource Manager to apply patches to all existing Oracle Linux interfaces in a specified compartment.
- C. Resource Manager manages to Terraform state file for your infrastructure and locks the file so that only one job at a time can run on a given stack.
- D. You can use Resource Manager to identify and maintain an inventory of all Compute and Database instances across your tenancy.
Answer: C
NEW QUESTION 47
You are asked to implement the disaster recovery (DR) and business continuity requirements for Oracle Cloud Infrastructure (OCI) Block Volumes. Two OCI regions being used: a primary/source region and a DR/ destination region. The requirements are:
There should be a copy of data in the destination region to use if a region-wide disaster occurs in the source region Minimize costs Which design will help you meet these requirements? (Choose the best answer.)
- A. Clone block volumes. Use Object Storage lifecycle management to automatically move clone objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.
- B. Clone block volumes. Copy block volume clones from source region to destination region at regular intervals.
- C. Back up block volumes. Use Object Storage lifecycle management to automatically move backup objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.
- D. Back up block volumes. Copy block volume backups from source region to destination region at regular intervals.
Answer: D
Explanation:
https://docs.oracle.com/en-us/iaas/Content/Block/Tasks/copyingvolumebackupcrossregion.htm
NEW QUESTION 48
Which statement about Oracle Cloud Infrastructure paravirtualized block volume attachments is TRUE? (Choose the best answer.)
- A. Paravirtualized is required to manage iSCSI configuration for virtual machine instances.
- B. Paravirtualized volumes become immediately available on bare metal compute instances.
- C. Paravirtualization utilizes the internal storage stack of compute instance OS and network hardware virtualization to access block volumes.
- D. Paravirtualized volumes may reduce the maximum IOPS performance for larger block volumes.
Answer: D
Explanation:
https://docs.oracle.com/en-us/iaas/Content/Block/Concepts/overview.htm#Paravirtualized
NEW QUESTION 49
You have created an Autonomous Data Warehouse (ADW) service in your company's Oracle Cloud Infrastructure (OCI) tenancy and you now have to load historical data into it. You have already extracted this historical data from multiple data marts and data warehouses. This data is stored in multiple CSV text files and these files are ranging in size from 25 MB to 20 GB.
Which is the most efficient and error tolerant method for loading data into ADW? (Choose the best answer.)
- A. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using the web console upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA for each CSV file to copy the contents into the corresponding ADW database table.
- B. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute Data Pump Import for each CSV file to copy the contents into the corresponding ADW database table.
- C. Create the tables in the ADW database and then execute SQL*Loader for each CSV file to load the contents into the corresponding ADW database table.
- D. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA for each CSV file to copy the contents into the corresponding ADW database table.
Answer: D
Explanation:
Using Object Storage and COPY_DATA is the standard recommended method for fetching data into ADW. Furthermore using CLI over web has the benefit of multipart upload, that is chunk upload of large files, thus reducing the chance of a transfer failure
NEW QUESTION 50
You have recently been asked to take over management of your company's infrastructure provisioning efforts, utilizing Terraform v0.12 to provision and manage infrastructure resources in Oracle Cloud Infrastructure (OCI). For the past few days the development environments have been failing to provision. Terraform returns the following error:
You locate the related code block in the Terraform config and find the following:
Which correction should you make to solve this issue? (Choose the best answer.)
- A. Replace the curly braces '{ }' in lines 11 and 16 with square braces '[ ]'
- B. Modify line 15 to be the following:
tcp_options = {min = "22", max = "22") - C. Modify line 15 to be the following:
tcp_options { min = "22"
max = "22"
} - D. Place a command at the end of line 16
Answer: B
NEW QUESTION 51
You have been asked to ensure that in-transit communication between an Oracle Cloud Infrastructure (OCI) compute instance and an on-premises server (192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a Dynamic IPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added.
What solution should you recommend? (Choose the best answer.)
- A. Advertise a 192.168.10.10/32 route over the VPN.
- B. The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.
- C. Advertise a 192.168.10.10/32 router over the FastConnect.
- D. The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.
Answer: D
NEW QUESTION 52
Here is a partial code from a Terraform template written for Oracle Cloud Infrastructure (OCI):
What operation(s) does it perform? (Choose the best answer.)
- A. Creates a URL to provide access to an OCI Object Storage bucket for managing objects.
- B. Creates a pre-authenticated request for objects in an OCI Object Storage bucket.
- C. Creates a lifecycle policy for an OCI Object Storage bucket for moving data to Archival storage at a specified time.
- D. Provides object read and write access for an OCI Object Storage bucket.
Answer: D
NEW QUESTION 53
......
1Z0-1067-21 Dumps Ensure Your Passing: https://passleader.briandumpsprep.com/1Z0-1067-21-prep-exam-braindumps.html
