[Sep-2021] 1Z0-1072-20 Pre-Exam Practice Tests | Exam Questions and Answers for Oracle Cloud Solutions Infrastructure Study Guide
Oracle Cloud Infrastructure 2020 Architect Associate Certification Sample Questions
NEW QUESTION 124
Which two statements are true about an Oracle Cloud Infrastructure object storage bucket? (Choose two.)
- A. You can associate a bucket with multiple compartments
- B. You cannot edit or append data to an object, but you can replace the entire object
- C. You can associate a bucket with only a single compartment
- D. You cannot change a bucket from private to public after it is created
Answer: B,C
Explanation:
Explanation
A bucket is associated with a single compartment.
You can't edit or append data to an object, but you can replace the entire object.
NEW QUESTION 125
Your organization has deployed a large, complex application across multiple compute instances in Oracle Cloud Infrastructure (OCI). These compute instances also have block volume storage attached to them. You want to create a time consistent backup of these block volume storage.
Which implementation strategy should be used?
- A. Group volumes in a volume group first and then use available scripts in OCI
- B. Create a manual backup of each volume
- C. Use scripts available in OCI to backup block volume storage
- D. Group volumes in a volume group and create a manual backup of the volume group
Answer: D
Explanation:
Explanation
The Oracle Cloud Infrastructure Block Volume service provides you with the capability to group together multiple volumes in a volume group. A volume group can include both types of volumes, boot volumes, which are the system disks for your Compute instances, and block volumes for your data storage. You can use volume groups to create volume group backups and clones that are point-in-time and crash-consistent.
This simplifies the process to create time-consistent backups of running enterprise applications that span multiple storage volumes across multiple instances. You can then restore an entire group of volumes from a volume group backup.
To create a backup of the volume group
Open the navigation menu. Under Core Infrastructure, go to Block Storage and click Volumes Groups.
In the Volume Groups list, click Create Volume Group Backup in the Actions menu for the volume group you want to create a backup for.
NEW QUESTION 126
As an Oracle Cloud Infrastructure tenancy administrator, you created predefined lists of values and associated them with tag key definitions.
One of the users in your tenancy complains that she cannot see these predefined values.
What is causing this issue?
- A. Some of the predefined values are null.
- B. The user is not part of an Identity and Access Management group that gives access to tagging.
- C. The user is trying to use free-form tags.
- D. The user has breached either the quota or service limit for using tags.
Answer: C
Explanation:
Reference:
https://docs.cloud.oracle.com/en-us/iaas/Content/Tagging/Tasks/usingpredefinedvalues.htm
NEW QUESTION 127
You are about to upload log file (5 TiB size) to Oracle Cloud Infrastructure object storage and have decided to use multipart upload capability for a more efficient and resilient upload.
Which two statements are true about multipart upload? (Choose two.)
- A. While a multipart upload is still active, you cannot add parts even if the total number of parts is less than
10,000 - B. Individual object parts can be as small as 10 MiB or as large as 50 GiB
- C. You do not have to commit the upload after you have uploaded all the object parts
- D. The maximum size for an uploaded object is 10 TiB
Answer: B,D
Explanation:
Explanation
With multipart upload, you split the object you want to upload into individual parts. Individual parts can be as large as 50 GiB or as small as 10 MiB. (Object Storage waives the minimum part size restriction for the last uploaded part.) Decide what part number you want to use for each part. Part numbers can range from 1 to
10,000. You do not need to assign contiguous numbers, but Object Storage constructs the object by ordering part numbers in ascending order.
The maximum size for an uploaded object is 10 TiB
While a multipart upload is still active, you can keep adding parts as long as the total number is less than
10,000.
NEW QUESTION 128
Your application front end consists of several Oracle Cloud Infrastructure compute instances behind a load balancer. You have configured the load balancer to perform health checks on these instances.
If an instance fails to pass the configured health checks, what will happen?
- A. The instance is taken out of the back end set by the load balancer.
- B. The load balancer stops sending traffic to that instance.
- C. The instance is replaced automatically by the load balancer.
- D. The instance is terminated automatically by the load balancer.
Answer: B
Explanation:
Explanation
One or more of the backend servers reports as unhealthy.
A backend server might be unhealthy or the health check might be misconfigured.
NEW QUESTION 129
Which statement is true about interconnecting Virtual Cloud Network (VCN)?
- A. Peering VCNs should not have overlapping CIDR blocks.
- B. VCNs must be in the same tenancy to be peered.
- C. The only way to interconnect VCNs is through peering.
- D. VCNs support transitive peering.
Answer: A
Explanation:
Reference:
https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/remoteVCNpeering.htm (note)
NEW QUESTION 130
Which statement Is true about Data Guard implementation in Oracle Cloud Infrastructure (OCI) bare metal and virtual machine database systems?
- A. Both database systems must be in the same compartment.
- B. Primary and standby database versions and editions need not be Identical.
- C. Database systems need not be the same shape type (e.g, primary database can be a virtual machine, and standby database a bare metal shape, and vice versa).
- D. Primary and standby databases must be in the same OCI region.
Answer: A
Explanation:
Reference:
https://docs.cloud.oracle.com/en-us/iaas/Content/Database/Tasks/exausingdataguard.htm
NEW QUESTION 131
You have the following compartment structure in your tenancy. Root compartment->Training->Training-subl ->Training-sub2 You create a policy in the root compartment to allow the default admin for the account (Administrators) to manage block volumes in compartment Training-sub2. What policy would you write to meet this requirement?
- A. Allow group Administrators to manage volume-family in compartment Training: Training-sub 1 :Training-sub2
- B. Allow group Administrators to manage volume-family in compartment Training-sub2
- C. Allow group Administrators to manage volume-family in root compartment
- D. Allow group Administrators to manage volume-family in compartment Training-sub1 :Training-sub2
Answer: A
Explanation:
a policy statement must specify the compartment for which access is being granted (or the tenancy). Where you create the policy determines who can update the policy. If you attach the policy to the compartment or its parent, you can simply specify the compartment name. If you attach the policy further up the hierarchy, you must specify the path. The format of the path is each compartment name (or OCID) in the path, separated by a colon:
<compartment_level_1>:<compartment_level_2>: . . . <compartment_level_n> For example, assume you have a three-level compartment hierarchy, shown here:
You want to create a policy to allow NetworkAdmins to manage VCNs in CompartmentC. If you want to attach this policy to CompartmentC or to its parent, CompartmentB, write this policy statement:
Allow group NewtworkAdmins to manage virtual-network-family in compartment CompartmentC However, if you want to attach this policy to CompartmentA (so that only administrators of CompartmentA can modify it), write this policy statement that specifies the path:
Allow group NewtworkAdmins to manage virtual-network-family in compartment CompartmentB:CompartmentC To attach this policy to the tenancy, write this policy statement that specifies the path from CompartmentA to CompartmentC:
Allow group NewtworkAdmins to manage virtual-network-family in compartment CompartmentA:CompartmentB:CompartmentC
NEW QUESTION 132
Which of the following statement is true regarding Oracle Cloud Infrastructure Object Storage Pre-Authenticated Requests?
- A. Changing the bucket visibility does not change existing pre-authenticated requests
- B. Pre-authenticated requests don't have an expiration
- C. It Is not possible to create pre-authenticated requests for "archive" storage tier
- D. It is not possible to create pre-authenticated requests for the buckets, but only for the objects
Answer: A
Explanation:
Explanation
Pre-authenticated requests provide a way to let users access a bucket or an object without having their own credentials, as long as the request creator has permissions to access those objects. For example, you can create a request that lets an operations support user upload backups to a bucket without owning API keys. Or, you can create a request that lets a business partner update shared data in a bucket without owning API keys.
When you create a pre-authenticated request, a unique URL is generated. Anyone you provide this URL to can access the Object Storage resources identified in the preauthenticated request, using standard HTTP tools like curl and wget.
Understand the following scope and constraints regarding pre-authenticated requests:
Users can't list bucket contents.
You can create an unlimited number of pre-authenticated requests.
There is no time limit to the expiration date that you can set.
You can't edit a pre-authenticated request. If you want to change user access options in response to changing requirements, you must create a new preauthenticated request.
The target and actions for a pre-authenticated request are based on the creator's permissions. The request is not, however, bound to the creator's account login credentials. If the creator's login credentials change, a pre-authenticated request is not affected.
You cannot delete a bucket that has a pre-authenticated request associated with that bucket or with an object in that bucket.
Understand the following scope and constraints regarding public access:
Changing the type of access is bi-directional. You can change a bucket's access from public to private or from private to public.
Changing the type of access doesn't affect existing pre-authenticated requests. Existing pre-authenticated requests still work.
NEW QUESTION 133
You are designing a networking infrastructure in multiple Oracle Cloud Infrastructure regions and require connectivity between workloads in each region. You have created a dynamic routing gateway (DRG) and a remote peering connection. However, your workloads are unable to communicate with each other.
What are two reasons for this? (Choose two.)
- A. An Internet gateway needs to be created in each VCN with a default route rule added in the route table forwarding the traffic to the Internet Gateway
- B. Identity and Access Management (IAM) policies have not been defined to allow connectivity across the two VCNs in different regions
- C. The route table associated with subnets in each VCN do not have a route rule defined to forward the traffic to their respective DRGs
- D. The security lists associated with subnets in each virtual cloud network (VCN) do not have the appropriate ingress rules
- E. A local peering gateway needs to be created in each VCN with a default route rule added in the route table forwarding the traffic to the local peering gateway
Answer: C,D
Explanation:
Explanation
Setting Up a Remote Peering
Create the RPCs: Each VCN administrator creates an RPC for their own VCN's DRG.
Share information: The administrators share the basic required information.
Set up the required IAM policies for the connection: The administrators set up IAM policies to enable the connection to be established.
Establish the connection: The requestor connects the two RPCs (see Important Remote Peering Concepts for the definition of the requestor and acceptor).
Update route tables: Each administrator updates their VCN's route tables to enable traffic between the peered VCNs as desired.
Update security rules: Each administrator updates their VCN's security rules to enable traffic between the peered VCNs as desired.
NEW QUESTION 134
Which statement is true regarding Autonomous Transaction Processing (ATP)?
- A. After terminating a database, the database name is available for immediate reuse
- B. A maximum of 2 TB of storage can be enabled for an ATP database
- C. A database name cannot be used concurrently for both an Autonomous Data Warehouse (ADW) and an ATP database
- D. A maximum of 8 cores can be enabled for an ATP database
Answer: C
Explanation:
The database name must be unique among all Autonomous Data Warehouses and Autonomous Databases in your tenancy in the same region.
Terminating an Autonomous Transaction Processing database permanently deletes the instance and removes all automatic backups. You cannot recover a terminated database.
the maximum number of CPUs and maximum storage capacity that can be provisioned in Oracle Autonomous Database In the current release up to 128 CPUs and 128TB can be provisioned from the cloud console. Customers requiring more resources need to call their Oracle account team
NEW QUESTION 135
You have been notified of an application failure indicating that one or more of the Oracle Cloud Infrastructure (OCI) resources have become unavailable. After scanning the Compute and Database consoles, you notice that one of the DB Systems is missing.
What should you do to identify the reason for this missing resource?
- A. View the service limits associated with your account to ensure that you have not exceeded the allowable number of DB Systems in your tenancy.
- B. Navigate to the Audit console and search the previous 24 hours for all the GET request actions to get a list of every event that occurred in the past 24 hours.
- C. Navigate to the Audit console and search the previous 24 hours for all DELETE request actions to get a list of any resource that was deleted in the past 24 hours.
- D. Create a serial console connection to the DB System that does not appear in the management console.
Connect to the serial console connection, and then review the system logs under /var/log/messages.
Answer: C
Explanation:
Explanation/Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/GSG/Tasks/usingaudit.htm
NEW QUESTION 136
You have launched a compute instance running Oracle database in a private subnet in the Oracle Cloud Infrastructure US East region. You have also created a Service Gateway to back up the data files to OCI Object Storage in the same region. You have modified the security list associated with the private subnet to allow traffic to the Service Gateway, but your instance still cannot access OCI Object Storage. How can you resolve this issue?
- A. Add a stateful rule that enables ingress HTTPS (TOP port 443) traffic to 001 Object Storage in the security list associated with the private subnet
- B. Add a rule in the Route Table associated with the private subnet with Target type as "Service Gateway" and destination service as all IAD services in the Oracle Service Network.'
- C. Use the default Security List, which has ports open for OCI Object Storage
- D. Add a stateful rule that enables egress HTTPS (TCP port 443) traffic to OCI Object Storage in the security list associated with the private subnet
Answer: B
Explanation:
Explanation
A service gateway lets your virtual cloud network (VCN) privately access specific Oracle services without exposing the data to the public internet. No internet gateway or NAT is required to reach those specific services. The resources in the VCN can be in a private subnet and use only private IP addresses. The traffic from the VCN to the Oracle service travels over the Oracle network fabric and never traverses the internet.
The service gateway is regional and enables access only to supported Oracle services in the same region as the VCN.
For traffic to be routed from a subnet in your VCN to a service gateway, you must add a rule accordingly to the subnet's route table. The rule must use the service gateway as the target. For the destination, you must use the service CIDR label that is enabled for the service gateway. This means that you don't have to know the specific public CIDRs, which could change over time.
NEW QUESTION 137
You have successfully configured identity federation between Oracle Cloud Infrastructure (OCI) and Oracle Identity Cloud Services (IDCS). A new project manager wants access to OCI for her team and provides the name of an existing group within IDCS to use when granting access.
How do you configure federation to allow the project team access to OCI resources?
- A. Create a new IAM group in OCI and map it to the existing IDCS group. Create a new policy in IDCS and reference the name of the IAM group.
- B. Create a new Identity and Access Management (IAM) policy in OCI and reference the name of the IDCS group in each policy statement.
- C. Create a new IAM group in OCI and map it to the existing IDCS group. Create a new IAM policy and reference the name of the IAM group in each policy statement.
- D. Create a new compartment in OCI with the same name as the existing IDCS group. Create an IAM policy that references the new compartment and the name of the IDCS group.
Answer: C
Explanation:
Explanation
When working with your IdP, your administrator defines groups and assigns each user to one or more groups according to the type of access the user needs. Oracle Cloud Infrastructure also uses the concept of groups (in conjunction with IAM policies) to define the type of access a user has. As part of setting up the relationship with the IdP, your administrator can map each IdP group to a similarly defined IAM group, so that your company can re-use the IdP group definitions when authorizing user access to Oracle Cloud Infrastructure resources. Here's a screenshot from the mapping process:
NEW QUESTION 138
Your organization has deployed a large, complex application across multiple compute instances in Oracle Cloud Infrastructure (OCI). These compute instances also have block volume storage attached to them. You want to create a time consistent backup of these block volume storage.
Which implementation strategy should be used?
- A. Group volumes in a volume group first and then use available scripts in OCI
- B. Create a manual backup of each volume
- C. Use scripts available in OCI to backup block volume storage
- D. Group volumes in a volume group and create a manual backup of the volume group
Answer: D
Explanation:
The Oracle Cloud Infrastructure Block Volume service provides you with the capability to group together multiple volumes in a volume group. A volume group can include both types of volumes, boot volumes, which are the system disks for your Compute instances, and block volumes for your data storage. You can use volume groups to create volume group backups and clones that are point-in-time and crash-consistent.
This simplifies the process to create time-consistent backups of running enterprise applications that span multiple storage volumes across multiple instances. You can then restore an entire group of volumes from a volume group backup.
To create a backup of the volume group
Open the navigation menu. Under Core Infrastructure, go to Block Storage and click Volumes Groups.
In the Volume Groups list, click Create Volume Group Backup in the Actions menu for the volume group you want to create a backup for.
NEW QUESTION 139
You are deploying a highly available web application In Oracle Cloud Infrastructure and have decided to use a public load balancer. The back-end web servers will be distributed across all three availability domains (ADs).
How many subnets should you create to deliver a secure, highly available application?
- A. three subnets in total; one regional public subnet to host your back-end web servers and two AD specific private subnets to host your private load load balancer.
- B. one subnet in total; one regional private subnet to host your back-end web servers and your public load balancer.
- C. two subnets in total; one regional private subnet to host your back-end web servers and one regional public subnet to host your public load load balancer.
- D. two subnets in total; one regional public subnet to host your back-end web servers and one regional private subnet to host your public load load balancer.
Answer: C
Explanation:
Explanation
To accept traffic from the internet, you create a public load balancer. The service assigns it a public IP address that serves as the entry point for incoming traffic. You can associate the public IP address with a friendly DNS name through any DNS vendor.
A public load balancer is regional in scope. If your region includes multiple availability domains, a public load balancer requires either a regional subnet (recommended) or two availability domain-specific (AD-specific) subnets, each in a separate availability domain. With a regional subnet, the Load Balancing service creates a primary load balancer and a standby load balancer, each in a different availability domain, to ensure accessibility even during an availability domain outage. If you create a load balancer in two AD-specific subnets, one subnet hosts the primary load balancer and the other hosts a standby load balancer. If the primary load balancer fails, the public IP address switches to the secondary load balancer. The service treats the two load balancers as equivalent and you cannot specify which one is "primary".
Whether you use regional or AD-specific subnets, each load balancer requires one private IP address from its host subnet. The Load Balancing service supplies a floating public IP address to the primary load balancer.
The floating public IP address does not come from your backend subnets.
You cannot specify a private subnet
The backend servers (Compute instances) associated with a backend set can exist anywhere, as long as the associated network security groups (NSGs), security lists, and route tables allow the intended traffic flow.
Oracle recommends that you create your load balancer in a regional subnet.
Oracle recommends that you distribute your backend servers across all availability domains within the region.
NEW QUESTION 140
Which of the following two tasks can be performed in the Oracle Cloud Infrastructure Console for Autonomous Data Warehouse?
- A. Scale up/down Memory
- B. Increase Storage allocated for Database
- C. Adjust Network Bandwidth
- D. Scale up/down CPU
Answer: B,D
Explanation:
You can scale up/down your Autonomous Database to scale both in terms of compute (CPU) and storage only when needed, allows people to pay per use.
Oracle allows you to scale compute and storage independently, no need to do it together. these scaling activities fully online (no downtime required) in Details page Autonomous Database in OCI console, click Scale Up/Down. Click on arrow to select a value for CPU Core Count or Storage (TB).
Or Select auto scaling to allow the system to automatically use up to three times more CPU and IO resources to meet workload demand, compared to the database operating with auto scaling disabled.
NEW QUESTION 141
You work for a health insurance company that stores a large number of patient health records in an Oracle Cloud Infrastructure (OCI) Object Storage bucket named "HealthRecords".
Each record needs to be securely stored for a period of 5 years for regulatory compliance purposes and cannot be modified, overwritten or deleted during this time period.
What can you do to meet this requirement?
- A. Enable encryption on the HealthRecords bucket using your own vault master encryption keys.
- B. Create an OCI Object Storage time-bound Retention Rule on the HealthRecords bucket for five years.
Enable Retention Rule Lock on this bucket. - C. Create an OCI Object Storage Lifecycle Policies rule to archive objects in the HealthRecords bucket for five years.
- D. Enable versioning on the HealthRecords bucket.
Answer: B
Explanation:
Reference:
https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/usingretentionrules.htm
NEW QUESTION 142
Which two tagging related items are valid attributes that may be included in payload of an audit log event? (Choose two.)
- A. Tag variables
- B. Free-form tags
- C. Cost-tracking tags
- D. Defined tags
- E. Predefined values
- F. Default tags
Answer: B,D
Explanation:
Reference:
https://docs.cloud.oracle.com/en-us/iaas/Content/Audit/Reference/logeventreference.htm#payload
NEW QUESTION 143
Which three are capabilities of the dbaascli utility? (Choose three.)
- A. Open port 1521 in the VCN to allow for traffic to the listener
- B. Clone a DB
- C. Start and open the database instance
- D. Patching the primary database deployment
- E. Switchover and failover in an Oracle Guard configuration
Answer: C,D,E
Explanation:
Explanation
https://docs.oracle.com/en/cloud/paas/database-dbaas-cloud/csdbi/dbaascli.html Using the dbaascli utility, you can:
Change the password of a database user.
Start and stop a database.
Start and stop the Oracle Net listener
Check the status of the Oracle Data Guard configuration.
Perform switchover and failover in an Oracle Data Guard configuration.
Patch the database deployment.
Perform database recovery.
Rotate the master encryption key.
https://docs.oracle.com/en/cloud/paas/database-dbaas-cloud/csdbi/dbaascli.html
NEW QUESTION 144
Which two statements are true about data guard service on DB Systems in Oracle Cloud Infrastructure (OCI)?
- A. Data guard configuration on the OCI is limited to a virtual machine only.
- B. Data guard implementation requires two DB Systems, one running the primary database on a virtual machine and the standby database running on bare metal.
- C. Data guard implementation requires two DB Systems, one containing the primary database and one containing the standby database.
- D. Both DB Systems must use the same VCN, and port 1521 must be open.
Answer: C,D
NEW QUESTION 145
......
Oracle Exam Practice Test To Gain Brilliante Result: https://www.validtorrent.com/1Z0-1072-20-valid-exam-torrent.html