Oracle Oracle Certifications 1Z0-1072-21 Questions & Answers

• Question 111:

  You are the Solutions Architect of a large company and are tasked with migrating all your services to Oracle Cloud Infrastructure. As part of this, you first design a Virtual Cloud Network (VCN) with a public subnet and a private subnet. Then in order to provide Internet connectivity to the instances in your private subnet, you create an Oracle Linux instance in your public subnet and configure NAT on it. However, even after adding all related security list rules and routes in the Route Table, your private subnet instances still cannot connect to the Internet. Which action should you perform to enable Internet connectivity?

  A. Disable "Source and Destination Check" on the VNIC of your Linux instance.

  B. There is no way that a private subnet can connect to the Internet.

  C. Create a Dynamic Routing Gateway (DRG) and route your private IP traffic to the DRG.

  D. Restart the NAT instance.

  Correct Answer: A

  https://docs.cloud.oracle.com/iaas/Content/Network/Tasks/managingVNICs.htm#Source/D By default, every VNIC performs the source/destination check on its network traffic. The VNIC looks at the source and destination listed in the header of each network packet. If the VNIC is not the source or destination, then the packet is dropped. If the VNIC needs to forward traffic (for example, if it needs to perform Network Address Translation (NAT)), you must disable the source/destination check on the VNIC. For instructions, see To update an existing VNIC. For information about the general scenario, see Using a Private IP as a Route Target.

• Question 112:

  What is a "transfer package" when transferring data to OCI via the OCI Data Transfer Service?

  A. A transfer package is the logical representation of the physical shipment containing the HDD transfer devices that you ship to Oracle to upload to OCI.

  B. A transfer package is the software Oracle provides for you to prepare transfer devices for shipment to Oracle

  C. A transfer package contains the physical devices.

  D. A transfer package is the archive file that the Data Transfer Service Utility (dts) writes to the transfer device.

  Correct Answer: A

  References: https://blogs.oracle.com/cloud-infrastructure/introducing-oracle-cloud-infrastructure-data-transfer- service

• Question 113:

  How can you provide users access to an existing compartment?

  A. by granting users access to a compartment when the compartment is created

  B. by adding users to a group and defining a policy to provide the group access to the compartment

  C. by adding users to a compartment. All users in the compartment will have access to the objects in the compartment.

  D. by granting access directly to the user when the user is created

  Correct Answer: B

  A policy is a document that specifies who can access which Oracle Cloud Infrastructure resources that

  your company has, and how. A policy simply allows a group to work in certain ways with specific types of

  resources in a particular compartment

  In general, here's the process an IAM administrator in your organization needs to follow:

  Define users, groups, and one or more compartments to hold the cloud resources for your organization.

  Create one or more policies, each written in the policy language. Place users into the appropriate groups

  depending on the compartments and resources they need to work with.

  Provide the users with the one-time passwords that they need in order to access the Console and work

  with the compartments. For more information,

• Question 114:

  Which two statements define the types of DNS resolvers that exist? (Choose two.)

  A. A custom resolver allows instances to use the host names of the hosts in your on-prem network that are connected to your VCN by an IPSec VPN connection.

  B. A VCN resolver allows instances to use the host names of the hosts in your on-prem network that are connected to your VCN by an IPSec VPN connection.

  C. A VCN resolver allows instances to use host names to communicate with instances on other VCNs in your tenancy.

  D. An Internet resolver allows instances to use the host names that are published on the Internet.

  Correct Answer: AD

  https://docs.cloud.oracle.com/iaas/Content/Network/Concepts/dns.htm This is an Oracle-provided option that includes two parts: Internet Resolver: Lets instances resolve hostnames that are publicly published on the internet. The instances do not need to have internet access by way of either an internet gateway or a connection to your on-premises network (such as an IPSec VPN connection through a DRG ). VCN Resolver: Lets instances resolve hostnames (which you can assign) of other instances in the same VCN. For more information, see About the DNS Domains and Hostnames. By default, new VCNs you create use the Internet and VCN Resolver. If you're using the Networking API, this choice refers to the VcnLocalPlusInternet enum in the DhcpDnsOption object. The Internet and VCN Resolver does not let instances resolve the hostnames of hosts in your on- premises network connected to your VCN by IPSec VPN connection or FastConnect. Use your own custom DNS resolver to enable that. https://docs.cloud.oracle.com/iaas/Content/Network/Concepts/dns.htm?Highlight=DNS%20resolve r#About

• Question 115:

  You need to create a high performance shared file system, and have been advised to use file storage service (FSS). You have logged into the Oracle Cloud Infrastructure console, created a file system, and followed the steps to mount the shared file system on your Linux instance. However, you are still unable to access the shared file system from your Linux instance. What is the likely reason for this?

  A. There are no security list rules for mount target traffic

  B. There is no internet gateway (IGW) set up for mount target traffic

  C. There is no Identity and Access Management (IAM) policies set up to allow you to access the mount target

  D. There is no route in your virtual cloud network's (VCN) route table for mount target traffic

  Correct Answer: A

  Virtual firewall rules for your VCN. Your VCN comes with a default security list, and you can add more. These security lists provide ingress and egress rules that specify the types of traffic allowed in and out of the instances. You can choose whether a given rule is stateful or stateless. Security list rules must be set up so that clients can connect to file system mount targets. For more information about how security lists work in Oracle Cloud Infrastructure, see Security Lists in the Networking documentation. For information about setting up specific security list rules required for mount target traffic, see Configuring VCN Security List Rules for File Storage. About Security explains how security lists interact with other types of security in your file system. https://docs.cloud.oracle.com/iaas/Content/File/Concepts/filestorageoverview.htm

• Question 116:

  For what business need should you use Database Cloud Service (DBCS) instead of Oracle database on a compute instance?

  A. to bring your own license on a compute service

  B. to lower license and infrastructure cost

  C. to implement Oracle RAC for high availability

  D. to build an Oracle database on a compute service

  Correct Answer: C

• Question 117:

  Which two statements are true about encryption on Oracle Cloud Infrastructure (OCI)? (Choose two.)

  A. By default, object storage and block storage are encrypted at rest.

  B. A customer is responsible for data encryption in all services of OCI.

  C. By default, DB Systems offers an encrypted database.

  D. By default, NVMe drives are encrypted but the block volume service is not.

  Correct Answer: AC

  References: https://cloud.oracle.com/storage/object-storage/features

• Question 118:

  You are the Cloud Architect of a company, and are designing a solution on Oracle Cloud Infrastructure where you want to have all your compute instances resistant to hardware failure. Which two are recommended best practices to achieve the requirement on Oracle Cloud Infrastructure? (Choose two.)

  A. Create a custom image of your system drive each time you change the image.

  B. Attach block volumes from different Availability Domains to compute instances in different Availability Domains for high availability.

  C. Design your system with redundant compute modes in different Availability Domains to support the failover capability.

  D. Create backups of your block volumes that are associated with compute instances in different regions.

  Correct Answer: AC

  References: https://docs.cloud.oracle.com/iaas/Content/Compute/References/bestpracticescompute.htm System Resilience Oracle Cloud Infrastructure runs on Oracle's high-quality Sun servers. However, any hardware can experience a failure. Follow industry-wide hardware failure best practices to ensure the resilience of your solution. Some best practices include: Design your system with redundant compute nodes in different availability domains to support fail- over capability. Create a custom image of your system drive each time you change the image. Back up your data drives, or sync to spare drives, regularly. If you experience a hardware failure and have followed these practices, you can terminate the failed instance, launch your custom image to create a new instance, and then apply the backup data.

• Question 119:

  You need to transfer over 12 TB of data from on-premises to your cloud account. You started copying this data over the internet and noticed that it will take too long to complete. Without increasing the costs of your subscription, what is the recommended way to send this amount of data to your cloud account?

  A. Use Data Transfer Service to send your data.

  B. Split the data into multiple parts and use the multipart tool.

  C. Use a 10 GB FastConnect line to send the data.

  D. Send the data over a VPN IPsec tunnel.

  E. Compress the data and use the multipart tool.

  Correct Answer: A

  References:

  Overview of Data Transfer Service

  Oracle offers offline data transfer solutions that let you migrate data to Oracle Cloud Infrastructure. Moving

  data over the public internet is not always feasible due to high network costs, unreliable network

  connectivity, long transfer times, and security concerns. Our transfer solutions address these pain points,

  are easy to use, and provide significantly faster data upload compared to over-the- wire data transfer.

  https://docs.cloud.oracle.com/iaas/Content/DataTransfer/Concepts/overview.htm

• Question 120:

  You have a shared file system between two web servers using File Storage Service (FSS) and you were tasked to create a backup plan for this environment to protect the data placed into the shared file system. What is the recommended approach to create this backup using FSS features?

  A. Implement a backup policy to execute a snapshot of the shared volume.

  B. Implement a backup policy to copy data from the shared volume to object storage.

  C. Compress the data that is in the shared volume and copy it into a different folder on the boot volume disk.

  D. Use the rsync tool to send data from the shared volume to a boot volume disk.

  E. Use the rsync tool to send data from the shared volume to a block volume.

  Correct Answer: A