Easily To Pass New 1Z0-1067-21 Verified & Correct Answers [Jul 31, 2022 [Q31-Q55]

Rate this post

Easily To Pass New 1Z0-1067-21 Verified & Correct Answers [Jul 31, 2022

Free 1Z0-1067-21 Exam Files Downloaded Instantly

Oracle 1Z0-1067-21 Exam Syllabus Topics:

Topic	Details
Topic 1	Implement hybrid network environments Designing for cloud-scale agility Data Retention and Archival
Topic 2	Create secure access control policies Implement automated notifications Understand Metric Query Language (MQL)
Topic 3	Utilize edge services for automated failover recovery Implement cross-region data copy strategies
Topic 4	Manage automated block storage and database backups Use Object Storage Lifecycle policies for tiered data storage
Topic 5	Create and managing alarms Monitoring and Alerting Security and Compliance
Topic 6	Manage infrastructure as code Utilize configuration management tools to control infrastructure Automating Cloud Tasks
Topic 7	Leverage automation to control cost Utilize billing tags to track cost Explain how to Implement billing alerts
Topic 8	Utilize CASB to remediate security vulnerabilities Leverage compartments for resource isolation
Topic 9	Explain Troubleshooting resource availability and accessability Validate OCI performance Performance Tuning and Troubleshooting

NEW QUESTION 31
You are using the Oracle Cloud Infrastructure Command Line Interface to launch a Linux virtual machine. You enter the following command (with correct values for all parameters):

The command fails.
Which is NOT a valid parameter in this command? (Choose the best answer.)

-t <tenancy_id>

– -image-id <image_id>

– -shape “<shape_name>”

-c <compartment_id>

– -subnet-id <subnet_id>

NEW QUESTION 32
Which statement about Oracle Cloud Infrastructure paravirtualized block volume attachments is TRUE? (Choose the best answer.)

Paravirtualized volumes may reduce the maximum IOPS performance for larger block volumes.

Paravirtualized is required to manage iSCSI configuration for virtual machine instances.

Paravirtualized volumes become immediately available on bare metal compute instances.

Paravirtualization utilizes the internal storage stack of compute instance OS and network hardware virtualization to access block volumes.

NEW QUESTION 33
Your team implemented a SaaS application that requires a whole system deployment for each new customer. The infrastructure provisioning is already automated via Terraform, and now you have been asked to develop an Ansible playbook to centralize configuration file management and deployment.
What is the most effective way to ensure your playbooks are utilizing up-to-date and accurate inventory? (Choose the best answer.)

Export an inventory list from the Oracle Cloud Infrastructure Web console.

Export an inventory list using Terraform apply command.

Implement a Command Line Interface script to list all the resources and run it within Ansible to generate a dynamic inventory list.

Download the dynamic inventory script provided by Oracle Cloud Infrastructure and include it in the playbook invocation command.

NEW QUESTION 34
You have been contracted by a local e-commerce company to assist with enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet, and a database in a separate, private subnet.
The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically.
After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)

Create a load balancer policy in the Traffic Management service. Configure one answer for each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.

Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A record. Inform customers to prepend the website URL with failover if the primary site is unavailable.

Create a failover policy in the Traffic Management service. Set the IP address of the public load balancer for the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.

Deploy a new load balancer in the primary region. Create one backend set for the primary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.

NEW QUESTION 35
Which option contains the essential components of the Oracle Cloud Infrastructure Notifications service? (Choose the best answer.)

An ALARM with a name unique across the tenancy, a SUBSCRIPTION, and a METRIC with the measurement of interest.

A TOPIC with a name unique across the tenancy, a SUBSCRIPTION, and a MESSAGE where content is published.

A TOPIC with a name unique across the compartment, a SUBSCRIPTION, and a MESSAGE where content is published.

An ALARM with a name unique across the compartment, a SUBSCRIPTION, and a METRIC with the measurement of interest.

NEW QUESTION 36
You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively.
You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us-phoenix-1 region only and not any other OCI regions.
What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.)

Allow group PHX-Admins to manage all-resources in tenancy where request.region= ‘phx’

Allow group PHX-Admins to manage all-resources in tenancy where request.permission= ‘phx’

Allow group PHX-Admins to manage all-resources in tenancy where request.target= ‘phx’

Allow group PHX-Admins to manage all-resources in tenancy where request.location= ‘phx’

NEW QUESTION 37
You have a group pf developers who launch multiple VM.Standard2.2 compute instances every day into the compartment Dev. As a result, your OCI tenancy quickly hit the service limit for this shape. Other groups can no longer create new instances using VM.Standard2.2 shape.
Because of this, your company has issued a new mandate that the Dev compartment must include a quota to allow for use of only 20 VM.Standard2.2 shapes per Availability Domain. Your solution should not affect any other compartment in the tenancy.
Which quota statement should be used to implement this new requirement? (Choose the best answer.)

set compute quota vm-standard2-2count to 10 in compartment dev where request.region = us-phoenix-1

set compute quota vm-standard2-2-count to 20 in compartment dev

zero compute quotas in tenancy
set compute quota vm-standard2-2-count to 20 in compartment dev

zero compute quotas in tenancy
set compute quota vm-standard2-2-count to 20 in tenancy dev

NEW QUESTION 38
You have ordered two FastConnect connections that provide a high availability connection architecture between your on-premises data center and Oracle Cloud Infrastructure (OCI). You want to run these connections in an ACTIVE/PASSIVE architecture.
How can you accomplish this? (Choose the best answer.)

Decrease the prefix length of AS for the FastConnect you want to use as PASSIVE connection.

Enable BGP on the FastConnect that you want as the ACTIVE connection.

Use AS PATH prepending with your routes.

Adjust one of the connections to have a higher ASN.

NEW QUESTION 39
Here is a partial code from a Terraform template written for Oracle Cloud Infrastructure (OCI):

What operation(s) does it perform? (Choose the best answer.)

Provides object read and write access for an OCI Object Storage bucket.

Creates a pre-authenticated request for objects in an OCI Object Storage bucket.

Creates a URL to provide access to an OCI Object Storage bucket for managing objects.

Creates a lifecycle policy for an OCI Object Storage bucket for moving data to Archival storage at a specified time.

NEW QUESTION 40
You have been monitoring your company’s applications running in Oracle Cloud Infrastructure (OCI) and notice that the application is using OCI Traffic Management service. This service uses a traffic steering policy to distribute the DNS traffic based on subnet addresses in a rule set.
Which steering policy is in use in this particular case? (Choose the best answer.)

Load Balancing policy

Geolocation steering

ASN steering policy

IP Prefix steering

NEW QUESTION 41
You have a web application running on Oracle Cloud Infrastructure (OCI) that lets users log in with a username and password. You notice that an attacker has tried to use SQL comment “–” to alter the database query, remove the password check and log in as a user. You decide to prevent any future attacks.
Which of the following OCI services or features would you choose to safeguard your application? (Choose the best answer.)

Network Security Group

Data Safe

Web Application Framework (WAF)

Vault

NEW QUESTION 42
Which two statements about the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI) are TRUE? (Choose two.)

You can run CLI commands from inside OCI Regions only.

You can filter CLI output using the JMESPath query option for JSON.

The CLI provides an automatic way to connect with instances provisioned on OCI.

The CLI allows you to use the Python language to interact with OCI APIs.

The CLI provides the same core functionality as the Console, plus additional commands.

NEW QUESTION 43
Your deployment platform within Oracle Cloud Infrastructure (OCI) leverages a compute instance with multiple block volumes attached. There are multiple teams that use the same compute instance and have access to these block volumes. You want to ensure that no one accidentally deletes any of these block volumes. You have started to construct the following IAM policy but need to determine which permissions should be used.
allow group DeploymentUsers to manage volume-family where ANY
{ request.permission != <???>, request.permission != <???>, request.permission !=
<???> }
Which permissions can you use in place of <???> in this policy? (Choose the best answer.)

VOLUME_DELETE, VOLUME_ATTACHMENT_DELETE, VOLUME_BACKUP_DELETE

VOLUME_ERASE, VOLUME_ATTACHMENT_ERASE, VOLUME_BACKUP_ERASE

ERASE_VOLUME, ERASE_VOLUME_ATTACHMENT, ERASE_VOLUME_BACKUP

DELETE_VOLUME, DELETE_VOLUME_ATTACHMENT, DELETE_VOLUME_BACKUP

NEW QUESTION 44
You have created a geolocation steering policy in the Oracle Cloud Infrastructure (OCI) Traffic Management service, with this configuration:

What happens to requests that originate in Africa? (Choose the best answer.)

The traffic will be forwarded at the same time to both Pool 1 and Pool 2.

The traffic will be dropped.

The traffic will be forwarded randomly to any of the pools mentioned in the rules.

The traffic will be forwarded to Pool 1. If Pool 1 is not available, then it will be forwarded to Pool 2.

NEW QUESTION 45
You have a web application running on Oracle Cloud Infrastructure (OCI) that lets users log in with a username and password. You notice that an attacker has tried to use SQL comment “–” to alter the database query, remove the password check and log in as a user. You decide to prevent any future attacks.
Which of the following OCI services or features would you choose to safeguard your application? (Choose the best answer.)

Network Security Group

Data Safe

Web Application Framework (WAF)

Vault

NEW QUESTION 46
You have been monitoring your company’s applications running in Oracle Cloud Infrastructure (OCI) and notice that the application is using OCI Traffic Management service. This service uses a traffic steering policy to distribute the DNS traffic based on subnet addresses in a rule set.
Which steering policy is in use in this particular case? (Choose the best answer.)

Load Balancing policy

Geolocation steering

ASN steering policy

IP Prefix steering

NEW QUESTION 47
You have created a group for several auditors. You assign the following policies to the group:

What actions are the auditors allowed to perform within your tenancy? (Choose the best answer.)

The Auditors can view resources in the tenancy.

Auditors are able to create new instances in the tenancy.

The Auditors are able to delete resource in the tenancy.

Auditors are able to view all resources in the compartment.

NEW QUESTION 48
You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively.
You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us-phoenix-1 region only and not any other OCI regions.
What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.) Allow group PHX-Admins to manage all-resources in tenancy where

request.region= ‘phx’
Allow group PHX-Admins to manage all-resources in tenancy where

request.permission= ‘phx’
Allow group PHX-Admins to manage all-resources in tenancy where

request.target= ‘phx’
Allow group PHX-Admins to manage all-resources in tenancy where

request.location= ‘phx’

NEW QUESTION 49
Your customer is running a set of compute instances inside a private subnet to manage their workloads on Oracle Cloud Infrastructure (OCI) tenancy. You have set up auto scaling feature to provide consistent performance to their end users during period of high demand.
Which step should be met for auto scaling to work? (Choose the best answer.)

OS Management Service agent (osms) must be installed on the instances.

Audit logs for the instances should be enabled.

Service gateway should be setup to allow instances to send metrics to monitoring service.

Monitoring for the instances should not be enabled.

NEW QUESTION 50
You have created a group for several auditors. You assign the following policies to the group:

What actions are the auditors allowed to perform within your tenancy? (Choose the best answer.)

The Auditors can view resources in the tenancy.

Auditors are able to create new instances in the tenancy.

The Auditors are able to delete resource in the tenancy.

Auditors are able to view all resources in the compartment.

NEW QUESTION 51
You have recently been asked to take over management of your company’s infrastructure provisioning efforts, utilizing Terraform v0.12 to provision and manage infrastructure resources in Oracle Cloud Infrastructure (OCI). For the past few days the development environments have been failing to provision. Terraform returns the following error:

You locate the related code block in the Terraform config and find the following:

Which correction should you make to solve this issue? (Choose the best answer.)

Place a command at the end of line 16

Modify line 15 to be the following:
tcp_options = {min = “22”, max = “22”)

Modify line 15 to be the following:
tcp_options { min = “22”
max = “22”
}

Replace the curly braces ‘{ }’ in lines 11 and 16 with square braces ‘[ ]’

NEW QUESTION 52
You have created a geolocation steering policy in the Oracle Cloud Infrastructure (OCI) Traffic Management service, with this configuration:

What happens to requests that originate in Africa? (Choose the best answer.)

The traffic will be forwarded at the same time to both Pool 1 and Pool 2.

The traffic will be dropped.

The traffic will be forwarded randomly to any of the pools mentioned in the rules.

The traffic will be forwarded to Pool 1. If Pool 1 is not available, then it will be forwarded to Pool 2.

NEW QUESTION 53
Which option contains the essential components of the Oracle Cloud Infrastructure Notifications service? (Choose the best answer.)

An ALARM with a name unique across the tenancy, a SUBSCRIPTION, and a METRIC with the measurement of interest.

A TOPIC with a name unique across the tenancy, a SUBSCRIPTION, and a MESSAGE where content is published.

A TOPIC with a name unique across the compartment, a SUBSCRIPTION, and a MESSAGE where content is published.

An ALARM with a name unique across the compartment, a SUBSCRIPTION, and a METRIC with the measurement of interest.

NEW QUESTION 54
You have recently joined a startup company and quickly find that nobody is tracking the amount of money spent on Oracle Cloud Infrastructure (OCI). Seeing an opportunity to help save money you begin creating a solution to better track the cost of resources provisioned by each individual on the team.
Which option allows you to identify excessive spend across all resources in your tenancy? (Choose the best answer.)

Use the Python SDK to write a custom application that will monitor the Audit log. Look for CREATE events and configure the application to send you an email each time a new resource is created.

Create a tag namespace named BILLING with a Tag Key named CostCenter. Tag each of your resources with this Tag Key and the correct value.

Use the Events Service and create rules that will act when a new Object Storage bucket or Compute Instance has been created. Have the rule email you each time one of these events occurs.

Create a budget for each compartment that will send a notification when monthly spend reaches a pre- defined amount.

NEW QUESTION 55
You have a 750 MIB file in an Oracle Cloud Infrastructure (OCI) Object Storage bucket. You want to download the file in multiple parts to speed up the download using the OCI CLI. You also want to configure each part size to be 128 MIB.
Which is the correct OCI CLI command for this operation? (Choose the best answer.) oci os object get -ns my-namespace -bn my-bucket –name my-large-object —

multipart-download-threshold 750 –parallel-download-count 128
oci os object download -ns my-namespace -bn my-bucket –name my-large-object

–multipart-download-threshold 750 –parallel-download-count 128
oci os object download -ns my-namespace -bn my-bucket –name my-large-object

–resume-put –multipart-download-threshold 500 –part-size 128
oci os object get -ns my-namespace -bn my-bucket –name my-large-object —

multipart-download-threshold 500 –part-size 128