Valid 1z0-1072-23 Exam Dumps Ensure you a HIGH SCORE (2024) [Q33-Q57]

Rate this post

Valid 1z0-1072-23 Exam Dumps Ensure you a HIGH SCORE (2024)

Pass 1z0-1072-23 Exam with Latest Questions

Oracle 1z0-1072-23 Exam Syllabus Topics:

Topic	Details
Topic 1	Describe OCI compute image options Configure DNS and Traffic Management
Topic 2	Configure Virtual Cloud Network Routing and Gateways Describe and configure a layer-7 Load Balancer
Topic 3	Configure Security Lists and Network Security Groups Describe and configure OS Management
Topic 4	Understand Observability and Management platform Configure Dynamic Groups and Tag based access control
Topic 5	Configure Volume Groups, Backups, Clones Implement conditional and advanced policies
Topic 6	Implement and manage Virtual Cloud Networks Describe and configure a layer-4 Network Load Balancer
Topic 7	Understand Block Volume performance tiers Understand Object Storage replication
Topic 8	Understand File System Snapshots and Cloning Describe and Configure Web Application Firewall and Certificates

QUESTION 33
You are responsible for deploying an application on Oracle Cloud Infrastructure (OCI). The application is memoryintensive and performs poorly if enough memory is not available. You have created an instance pool of Linuxcompute instances in OCI to host the application and defined Autoscaling Configuration for the instance pool.
What should you do to ensure that the instance pool autoscales to prevent poor application performance?

Install OCI SDK on all compute instances and create a script that triggers theautoscaling event if there ishigh memory usage.

Configure the autoscaling policy to monitor memory usage and scale up the number of instances when itmeets the threshold.

Install the monitoring agent on all compute instances, which triggers the autoscaling group.

Configure the autoscaling policy to monitor CPU usage and scale up the number of instances when it meets the threshold

QUESTION 34
Which TWO are key benefits of setting up Site-to-Site VPN on Oracle Cloud Infrastructure (OCI)?

When setting up Site-to-Site VPN, it creates a private connection that provides consistent network experience.

When setting up Site-to-Site VPN, customers can configure it to use static or dynamic routing (BGP).

When setting up Site-to-Site VPN, OCI provisions redundant VPN tunnels.

When setting up Site-to-Site VPN, customers can expect bandwidth above 2 Gbps.

When setting up Site-to-Site VPN, customers can configure it to use static or dynamic routing (BGP). When setting up Site-to-Site VPN, OCI provisions redundant VPN tunnels. The explanation is that Site-to-Site VPN is a secure and encrypted connection between your on-premises network and your Virtual Cloud Network (VCN) in OCI over the public internet. When setting up Site-to-Site VPN, you can choose to use static routing or dynamic routing (Border Gateway Protocol or BGP) to exchange routes between your network and OCI. OCI also provisions two redundant VPN tunnels for each Site-to-Site VPN connection to provide high availability and failover.

QUESTION 35
You have a block volume created in the US West (Phoenix) region. You enabled Cross Region Replication for thevolume and selected US West (San Jose) as the destination region. Now, you would like to create a new volumefrom the volume replica in the US West (San Jose) region.
What should you do?

Activate the replica.

Trigger the replica.

No action required. By default, the replica is available as a block volume.

Initiate the replica.

Explanation
The explanation is that when you enable Cross Region Replication for a block volume, Object Storage creates a replica of the volume in another region of your choice. The replica is not available as a block volume until you activate it. To activate a replica, you need to select the replica from the Block Storage console and click Activate Replica. This will create a new block volume from the replica in the destination region.

QUESTION 36
Which statement is TRUE about delegating an existing domain to the OracleCloud Infrastructure (OCI) DNS service?

Domains can be delegated to OCI DNS via FastConnect partners.

Domains can be delegated to OCI DNS from the OCI Marketplace.

Domains can be self-delegated to OCI DNS from its own service portal.

Domains can be delegated to OCI DNS from the Domain Registrar’s self-service portal.

All domains can be retrieved to OCI DNS via DYN.

Explanation
Domains can be delegated to OCI DNS from the Domain Registrar’s self-service portal. The explanation is that delegating a domain to OCI DNS means that you are transferring the authority to resolve DNS queries for your domain from your current DNS provider to OCI DNS. To delegate a domain to OCI DNS, you need to create a zone in OCI DNS that matches your domain name and add any records that you want to serve from OCI DNS. Then, you need to update the name servers for your domain at your Domain Registrar’s self-service portal with the name servers provided by OCI DNS. This will point your domain to OCI DNS and allow it to resolve DNS queries for your domain.

QUESTION 37
You create a file system and then add a 2 GB file. You then take a snapshot of the file system.
What would be the total meteredBytes shown by the File Storage service after the hourly update cycle is complete?

3 GB

2.5 GB

4 GB

2 GB

The total meteredBytes shown by the File Storage service after the hourly update cycle is complete would be 2 GB. This is because snapshots do not consume any additional storage space unless there are changes made to the file system after taking the snapshot. Since no changes were made in this scenario, the snapshot would not add any extra storage cost. Reference: [Snapshots and MeteredBytes]

QUESTION 38
You are part of a team that manages a set of workload instances running in an on-premises environment.
TheArchitect team is tasked with designing and configuring Oracle Cloud Infrastructure (OCI) Logging service tocollect logs from these instances. There is a requirement to archive Info-level logging data of these instances intothe OCI Object Storage.
Which TWO features of OCI can help you achieve this?

Cloud Agent Plugin

Grouping Function

Service Connectors

Agent Configuration

ObjectCollectionRule

Explanation
Cloud Agent Plugin and Service Connectors are two features of OCI that can help collect logs from on-premises instances and archive them into OCI Object Storage. Cloud Agent Plugin is a component of the OCI Logging service that can be installed on any Linux or Windows instance to collect logs and send them to OCI. Service Connectors are components of the OCI Service Connector Hub that can transfer data between different OCI services, such as Logging and Object Storage. The other options are not relevant for this requirement. References: [Cloud Agent Plugin], [Service Connectors]

QUESTION 39
Which is NOT a valid action within the Oracle Cloud Infrastructure (OCI) Block Volume service?

Expanding an existing volume in place with offline resizing.

Restoring from a volume backup to a larger volume.

Attaching a block volume to an instance in a different availability domain.

Cloning an existing volume to a new, larger volume.

Explanation
Attaching a block volume to an instance in a different availability domain is not a valid action within the OCI Block Volume service. A block volume can only be attached to an instance in the same availability domain.
The other options are valid actions that can be performed with the Block Volume service. References: [Block Volume Actions]

QUESTION 40
You just got a last minute request to create a set of instances in Oracle Cloud Infrastructure (OCI). The configuration and installed software are identical for every instance, and you already have a running instance in your OCI tenancy. Which image option allows you to achieve this task with the least amount of effort?

Bring your own image and use it as a template for the new instances.

Select an image from the OCI Marketplace.

Use Oracle-provided images and customize the installation using a third-party tool.

Create a custom image and use it as a template for the new instances.

Creating a custom image and using it as a template for the new instances is the option that allows you to achieve this task with the least amount of effort. A custom image is a copy of an existing instance that you can use to launch other instances with the same configuration and installed software. The other options are not suitable for this scenario, as they would require more time and effort to create and customize the instances. Reference: [Custom Images]

QUESTION 41
As your company’s cloud architect, you have been invited by the CEO to join hisstaff meeting. They want yourinput on interconnecting Oracle Cloud Infrastructure (OCI) to another cloudprovider in London, with some specific requirements:
* They want resources in the other cloud provider to leverage OCI Autonomous Data Warehouse ML capabilities.
* The connection between OCI and the other cloud provider should be provisioned as quickly as possible.
* The connection should offer high bandwidth and predictable performance.
Which other cloud provider should you recommend to interconnect with OCI and meet the above requirements?

IBM Cloud

Google Cloud

OCI

Microsoft Azure

Digital Ocean

Amazon Web Services

Alibaba Cloud

Explanation
The explanation is that Microsoft Azure is one of the cloud providers that has an interconnect location with OCI in London. This means that you can use OCI FastConnect to establish a private and dedicated connection between OCI and Azure in London, with high bandwidth and predictable performance. This connection can also enable you to leverage OCI Autonomous Data Warehouse ML capabilities from Azure resources, as you can access OCI services across regions using private IP addresses. The interconnect location can be provisioned quickly using the OCI and Azure consoles or APIs.

QUESTION 42
You are part of a team that manages a set of workload instances running in an on-premises environment. The Architect team is tasked with designing and configuring Oracle Cloud Infrastructure (OCI) Logging service to collect logs from these instances. There is a requirement to archive Info-level logging data of these instances into the OCI Object Storage.
Which TWO features of OCI can help you achieve this?

Cloud Agent Plugin

Grouping Function

Service Connectors

Agent Configuration

ObjectCollectionRule

Cloud Agent Plugin and Service Connectors are two features of OCI that can help collect logs from on-premises instances and archive them into OCI Object Storage. Cloud Agent Plugin is a component of the OCI Logging service that can be installed on any Linux or Windows instance to collect logs and send them to OCI. Service Connectors are components of the OCI Service Connector Hub that can transfer data between different OCI services, such as Logging and Object Storage. The other options are not relevant for this requirement. Reference: [Cloud Agent Plugin], [Service Connectors]

QUESTION 43
You are responsible for creating and maintaining an enterprise application that consists of multiple storage volumes across multiple compute instances in Oracle Cloud Infrastructure (OCI).
The storage volumes include boot volumes and block volumes for your data storage. You need to create a backup for the boot volumes that will be done daily and a backup for the block volumes that will be done every six hours.
How can you meet this requirement?

Create clones of all boot volumes and block volumes one at a time.

Group the boot volumes into a volume group and create a custom backup policy. Group the block volumes and create a custom backup policy.

Create on-demand full backups of block volumes, and create custom images from the boot volumes. Use a function to run at a specific time to start the backup process.

Group multiple storage volumes in a volume group and create volume group backups.

Group the boot volumes into a volume group and create a custom backup policy. Group the block volumes and create a custom backup policy. The explanation is that volume groups are logical collections of block volumes and boot volumes that can be backed up together as a consistent point-in-time snapshot. You can create a custom backup policy for each volume group and specify the frequency and retention period of the backups. This way, you can meet different backup requirements for different types of volumes.

QUESTION 44
Your DevOps team needs to interconnect the on-premises network to the Oracle Cloud Infrastructure(OCI)resources, such as a managed database that resides in a private subnet. Theyindicate that they have a lowbudget and their bandwidth requirements are minimal, so you decide that a site-to-site VPN is the best option.
They provide you with their router public IP address. You need to create an object in OCI that represents thisrouter. Which object would you create?

Internet Gateway

Dynamic Routing Gateway (DRG)

Customer Premises Equipment (CPE)

Virtual Network Interface Card (vNIC)

IPSec Tunnel

Bastion Host

Explanation
Customer Premises Equipment (CPE). The explanation is that CPE is an object in OCI that represents your on-premises router or VPN device that connects to your VCN via a site-to-site VPN. A site-to-site VPN is a secure and encrypted connection between your on-premises network and your VCN over the public internet.
To set up a site-to-site VPN, you need to create a CPE object with your router’s public IP address and other information, such as vendor and platform. You also need to create a Dynamic Routing Gateway (DRG) object in your VCN andattach it to your VCN. Then, you need to create an IPSec connection between your CPE and DRG, which will create two redundant VPN tunnels for high availability.

QUESTION 45
Which of the following statements is true about cloning a volume in the Oracle Cloud Infrastructure (OCI) BlockVolume service?

You need to detach a volume before cloning it.

Creating a clone takes longer than creating a backup of a volume.

You can clone a volume to another region.

You can change the block volume size when cloning a volume.

Explanation
You can change the block volume size when cloning a volume. The explanation is that cloning a volume is a way of creating an exact copy of an existing volume without creating a backup first. Cloning a volume is faster and cheaper than creating a backup and restoring it to a new volume. When you clone a volume, you can change the block volume size, performance, encryption settings, and tags of the new volume. You do not need to detach a volume before cloning it, as cloning does not affect the source volume or its attachments. You cannot clone a volume to another region, as cloning only works within the same region and availability domain. Creating a clone usually takes less time than creating a backup of a volume, as cloning does not involve transferring data to Object Storage.

QUESTION 46
You created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain applicationservers and the third subnet contains a DB System. The application requires a shared file system, therefore youhave provisioned one using the file storage service (FSS).
You have also created the corresponding mount target in one of the application subnets. The VCN security listsare properly configured so that the application servers can access FSS. The securityteam changed the settings forthe DB System to have read-only access to the file system. However when they testit, they are unable to accessFSS.
How would you allow access to FSS?

Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DBSystem subnet.

Create an instance principal for the DB System. Write an Identity andAccess Management (IAM) policythat allows the instance principal read-only access to the file storage service.

Modify the security list associated with the subnet where the mount target resides. Change the ingressrules corresponding to the DB System subnet to be stateless.

Modify the security list associated with the subnet where the mount target resides.

Change the ingress rules corresponding to the DB System subnet to be stateful.

Explanation
Creating an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet is the correct answer. This is because NFS export options are used to control the level of access that clients have to file systems. By creating an NFS export option with READ_ONLY access for the DB System subnet, you can allow the DB System to read data from the file system, but not write or modify it.
The other options are not correct, as they do not address the requirement of read-only access for the DB System. References: [NFS Export Options]

QUESTION 47
Which THREE protocols are supported by the Oracle Cloud Infrastructure (OCI) Network Load Balancer?

HTTP

UDP

BGP

TCP

ICMP

iSCSI

The explanation is that the OCI Network Load Balancer supports three protocols: UDP, TCP, and ICMP. These protocols are used to distribute traffic across multiple backend servers based on different criteria, such as source and destination IP addresses, ports, and ICMP types and codes.

QUESTION 48
Which statement is true about File System Replication in Oracle Cloud Infrastructure (OCI)?

You can replicate the data in one file system to another file system only in the same region.

You can replicate the data in one file system to another file system in the same region or a different region.

Only a file system that has been exported can be used as a target file system.

You cannot specify a replication interval when you create the replication resource.

You can replicate the data in one file system to another file system in the same region or a different region is a true statement about File System Replication in OCI. File System Replication is a feature that allows users to create a copy of a file system in another file system, either within the same region or across regions. This can be useful for disaster recovery, data migration, or data distribution purposes. The other statements are false about File System Replication in OCI. Reference: [File System Replication]

QUESTION 49
Which TWO statements are TRUE about Private IP addresses in Oracle Cloud Infrastructure (OCI)?

Each VNIC can only have one private IP address.

By default, the primary VNIC of an instance in a subnet has one primary private IP address.

By default, the primary VNIC of an instance in a subnet has one primary private IP address and one secondary private IP address.

A private IP can have an optional public IP assigned to it if it resides in a public subnet.

Explanation
By default, the primary VNIC of an instance in a subnet has one primary private IP address. A private IP can have an optional public IP assigned to it if it resides in a public subnet. The explanation is that a private IP address is an IPv4 address that is assigned to a VNIC and belongs to the CIDR block of the VCN or subnet.
By default, the primary VNIC of an instance in a subnet has one primary private IP address, which is automatically assigned by OCI and cannot be changed. However, you can also assign secondary private IP addresses to a VNIC, either manually or automatically, up to a maximum of 31 per VNIC. A private IP address can have an optional public IP address assigned to it, which allows the instance to communicate with the internet. A public IP address can be either ephemeral or reserved, depending on whether you want to keep it after stopping or terminating the instance. A private IP address can only have a public IP address assigned to it if it resides in a public subnet, which means that the subnet’s route table has a route rule that directs traffic to the internet gateway.

QUESTION 50
Which TWO statements about the Oracle Cloud Infrastructure (OCI) File Storage Service are accurate?

Communication with file systems in a mount target is encrypted via HTTPS.

File systems use Oracle-managed keys by default.

Customer can encrypt data in their file system using their own Vault encryption key.

Mount targets use Oracle-managed keys by default.

Customer can encrypt the communication to a mount target via export options.

File systems use Oracle-managed keys by default. Customer can encrypt data in their file system using their own Vault encryption key. The explanation is that File Storage Service encrypts all data at rest using AES-256 encryption algorithm. By default, File Storage Service uses Oracle-managed keys to encrypt and decrypt data. However, you can also use your own Vault encryption key to encrypt data in your file system. To do so, you need to create a key in Vault and associate it with your file system when you create or update it.

QUESTION 51
Which statement accurately describes the key features and benefits of OCI Confidential Computing?

It encrypts and isolates in-use data and the applications processing that data, thereby preventing unauthorized access or modification.

It optimizes network performance and reduces latency through advanced routing algorithms and caching mechanisms.

It enables users to securely store and retrieve data by using distributed file systems, ensuring high availability and fault tolerance.

It provides automatic scalability and load balancing capabilities, which allow seamless integration with other cloud providers.

It encrypts and isolates in-use data and the applications processing that data, thereby preventing unauthorized access or modification is an accurate description of the key features and benefits of OCI Confidential Computing. Confidential Computing is a feature that leverages hardware-based Trusted Execution Environments (TEEs) to protect data and applications from unauthorized access or modification while they are in use by the CPU or memory. This adds an extra layer of security to cloud computing, as it protects data not only at rest and in transit, but also in use. The other options are not accurate descriptions of the key features and benefits of OCI Confidential Computing. Reference: [Confidential Computing]

QUESTION 52
You are in the process of migrating several legacy applications from on-premises to Oracle Cloud Infrastructure (OCI). The current servers are already virtualized. However, you notice that the version of CentOS currentlyrunning does not align with any of the Oracle-provided compute images.How would you migrate your existing virtual server images to OCI?

Export your current image in the VMDK format and copy to an Object Storage bucket. Import it as a custom image. Select native mode to ensure the best possible performance.

Export your current image in the VDI format and copy to an Object Storagebucket. Import it as a customimage. Select native modeto ensure the best possible performance.

Export your current image in the QED format and copy to an Object Storagebucket. Import it as a customimage. Select emulated modeto ensure compatibility with legacy drivers.

Export your current image in the QCOW2 format and copy to an Object Storage bucket. Import it as a custom image. Select emulated mode to ensure compatibility with legacy drivers

Explanation
Export your current image in the QCOW2 format and copy to an Object Storage bucket. Import it as a custom image. Select emulated mode to ensure compatibility with legacy drivers. The explanation is that QCOW2 is one of the supported formats for importing custom images to OCI. Custom images are images that you can create from your own on-premises or cloud servers and use them to launch instances in OCI. To import a custom image, you need to export your current image in a supported format, copy it to an Object Storage bucket, and then import it as a custom image using the OCI console or API. When you import a custom image, you can choose between native mode or emulated mode. Native mode offers better performance but requires compatible drivers and firmware. Emulated mode offers better compatibility but lower performance.

QUESTION 53
Oracle Cloud Agent is a lightweight process that manages plugins running on compute instances.
Which is NOT a valid Oracle Cloud Agent plugin name?

Live Migration Agent

OS Management Service Agent

Compute Instance Run Command

Bastion

Bastion is not a valid Oracle Cloud Agent plugin name. Bastion is a service that enables secure and controlled access to compute instances in OCI. The other options are valid plugin names that provide different functionalities for the instances. Reference: [Bastion], [Cloud Agent Plugins]

QUESTION 54
You have a high-demand web application running on Oracle Cloud Infrastructure (OCI). Your tenancy administrator has set up a schedule-based autoscaling policy on instance pool withan initial size of 5 instancesfor the application.
Policy 1:
Target pool size:10 instances
Execution time:8:30 a.m. on every Monday through Friday, in every month, in every year Cron expression:0 30 8 ? * MON-FRI * Which statement accurately explains the goal of this policy?

Goal: A one-time schedule with only one scaling out event. At 8:30 a.m., on December 31, 2021, scale theinstance pool to 10 instances from 5.

Goal: A recurring monthly schedule. On all days of the month, set the initial pool size to 5 instances. At
8.30 a.m., on every day of the month, scale out to 10 instances.

Goal: A recurring daily schedule. On weekday mornings at 8.30 a.m., scale out to 10 instances.

Goal: A recurring weekly schedule. On all days of the week at 8.30 a.m., scale out the pool to 10 instancesfrom the initial size of 5

Explanation
The explanation is that a schedule-based autoscaling policy allows you to adjust the size of your instance pool based on a cron expression that specifies the date and time of the scaling action. The cron expression consists of six fields: seconds, minutes, hours, day of month, month, and day of week. In this case, the cron expression is 0 30 8 ? * MON-FRI *, which means that the scaling action will occur at 8:30 a.m. on every Monday through Friday, regardless of the day of month or month. Therefore, the goal of this policy is to scale out the instance pool to 10 instances on weekday mornings at 8:30 a.m.

QUESTION 55
A financial firm is designing an application architecture for its online trading platform that should have high availability and fault tolerance.
Their solutions architects configured the application to use an Oracle Cloud Infrastructure (OCI) Object Storage bucket located in the US West (us-phoenix-1) region to store large amounts of financial dat a. The stored financial data in the bucket should not be impacted even if there is an outage in one of the Availability Domains or a complete region.
What should the architect do to avoid any costly service disruptions and ensure data durability?

Create a replication policy to send data to a different bucket in another OCI region.

Copy the Object Storage bucket to a block volume.

Create a lifecycle policy to regularly send data from the Standard to Archive storage.

Create a new Object Storage bucket in another region and configure lifecycle policy to move data every 5 days.

Create a replication policy to send data to a different bucket in another OCI region. The explanation is that replication is a feature of Object Storage that allows you to automatically copy objects from one bucket to another bucket, either in the same region or in a different region. Replication can help you improve data availability and durability, as well as meet compliance and disaster recovery requirements. To enable replication, you need to create a replication policy that specifies the source and destination buckets, the replication frequency, and the replication filters. Replication policies are evaluated every five minutes and copy any new or updated objects from the source bucket to the destination bucket.

QUESTION 56
You are using a custom application with third-party APIs to manage the application and data hosted in an OracleCloud Infrastructure (OCI) tenancy. Although your third-party APIs do not support OCI’s signature-based authentication, you want them to communicate with OCI resources. Which authentication option should you useto ensure this?

Auth Tokens

OCI Username and Password

API Signing Key

SSH Key Pair with 2048-bit algorithm

Explanation
Auth Tokens is the authentication option that you should use to ensure that your custom application with third-party APIs can communicate with OCI resources. Auth Tokens are tokens that can be used as an alternative to passwords when making API calls to OCI services. Auth Tokens can be generated and revoked by users in the OCI Console or CLI, and can be used with any API client that supports basic authentication.
The other options are not suitable for this scenario, as they either require OCI’s signature-based authentication or are not applicable for API calls. References: [Auth Tokens]

QUESTION 57
You create a file system and then add a 2 GB file. You then take a snapshot of the file system.
What would be the total meteredBytes shown by the File Storage service after the hourly update cycle is complete?

3 GB

2.5 GB

4 GB

2 GB

Explanation
The total meteredBytes shown by the File Storage service after the hourly update cycle is complete would be 2 GB. This is because snapshots do not consume any additional storage space unless there are changes made to the file system after taking the snapshot. Since no changes were made in this scenario, the snapshot would not add any extra storage cost. References: [Snapshots and MeteredBytes]

Loading …