Oracle Oracle Certifications 1Z0-1067-22 Questions & Answers

• Question 51:

  You have received an email from your manager to provision new resources on Oracle Cloud Infrastructure (OCI). When researching OCI, you determined that you should use OCI Resource Manager. Since this is a task that will be done multiple times for development, test, and production. You will need to create a command that can be re-used.

  Which CLI command can be used in this situation? (Choose the best answer.)

  A. oci resource-manager stack create ––tenancy–id \ ––config-source prod.zip ––variables file://variables.json \ ––display-name Production stack build \ ––description Creating new Production environment

  B. oci resource-manager stack update ––compartment–id \ ––config-source prod.zip ––variables file://variables.json \ ––display-name “Production stack build” \ ––description Creating new Production environment

  C. oci resource-manager stack create ––compartment–id \ ––config-source prod.zip ––variables file://variables.json \ ––display-name Production stack build \ ––description Creating new Production environment

  D. oci resource-manager stack update ––tenancy–id \ ––config-source prod.zip ––variables file://variables.json \ ––display-name “Production stack build” \ ––description Creating new Production environment

  Correct Answer: C

• Question 52:

  You have a web application running on Oracle Cloud Infrastructure (OCI) that lets users log in with a username and password. You notice that an attacker has tried to use SQL comment “--" to alter the database query, remove the password check and log in as a user. You decide to prevent any future attacks.

  Which of the following OCI services or features would you choose to safeguard your application? (Choose the best answer.)

  A. Network Security Group

  B. Data Safe

  C. Web Application Framework (WAF)

  D. Vault

  Correct Answer: D

• Question 53:

  One of the compute instances that you have deployed on Oracle Cloud Infrastructure (OCI) is malfunctioning. You have created a console connection to remotely troubleshoot it.

  Which two statements about console connections are TRUE? (Choose two.)

  A. It is not possible to use VNC console connections to connect to Bare Metal Instances.

  B. VNC console connection uses SSH port forwarding to create a secure connection from your local system to the VNC server attached to your instance's console.

  C. It is not possible to connect to the serial console to an instance running Microsoft Windows, however VNC console connection can be used.

  D. For security purpose, the console connection will not let you edit system configuration files.

  E. If you do not disconnect from the session, your serial console connection will automatically be terminated after 24 hours.

  Correct Answer: BE

• Question 54:

  You have been asked to ensure that in-transit communication between an Oracle Cloud Infrastructure (OCI) compute instance and an on-premises server (192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a Dynamic IPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added.

  What solution should you recommend? (Choose the best answer.)

  A. The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.

  B. Advertise a 192.168.10.10/32 route over the VPN.

  C. Advertise a 192.168.10.10/32 router over the FastConnect.

  D. The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.

  Correct Answer: D

  Reference: https://docs.oracle.com/en-us/iaas/Content/Network/Tasks/transitrouting.htm

• Question 55:

  You have created a group for several auditors. You assign the following policies to the group:

  

  What actions are the auditors allowed to perform within your tenancy? (Choose the best answer.)

  A. The Auditors can view resources in the tenancy.

  B. Auditors are able to create new instances in the tenancy.

  C. The Auditors are able to delete resource in the tenancy.

  D. Auditors are able to view all resources in the compartment.

  Correct Answer: D