Oracle Oracle Certifications 1Z0-1072-21 Questions & Answers

• Question 61:

  What is true about data guard set up with fast-start failover (FSFO) in Oracle Cloud Infrastructure (OCI)?

  A. The best practice for high availability and durability is to run the primary, standby, and observer in separate availability domains (ADs).

  B. When you configure data guard using OCI console, the default mode is set to maxprotection.

  C. You cannot create the standby DB system in a different AD from the primary DB system.

  D. You cannot use database command line interface (CLI) to set up data guard with FSFO.

  Correct Answer: A

  References: The best practice for high availability and durability is to run the primary, standby, and observer in separate availability domains. The observer determines whether or not to failover to a specific target standby database https://docs.cloud.oracle.com/enus/iaas/Content/Database/Tasks/usingDG.htm#ConfiguringObserverOptional

• Question 62:

  Which two choices are true for Autonomous Data Warehouse (ADW)? (Choose two.)

  A. Billing stops only when the ADW is terminated

  B. Billing stops for both CPU usage and storage usage when ADW is stopped

  C. Billing for compute stops when ADW is stopped

  D. Billing for storage continues when ADW is stopped

  Correct Answer: CD

  When Autonomous Databas instance is stopped, CPU billing is halted based on full-hour cycles of usage Billing for storage continues as long as the service instance exists. and When Autonomous Database instance is started, the CPU billing is initiated

• Question 63:

  Which statement is true about Oracle Cloud Infrastructure FastConnect?

  A. For private peering, FastConnect extends your existing infrastructure to allow you to consume object storage from your on-premises data center

  B. For private peering, FastConnect extends your existing infrastructure to a virtual cloud network

  C. The FastConnect provider network offers only 1 Gbps port connection speed increments

  D. For public peering, a dynamic routing gateway must be configured and attached to the virtual cloud network (VCN)

  Correct Answer: B

  With FastConnect, you can choose to use private peering, public peering, or both. Private peering: To extend your existing infrastructure into a virtual cloud network (VCN) in Oracle Cloud Infrastructure (for example, to implement a hybrid cloud, or a lift and shift scenario). Communication across the connection is with IPv4 private addresses (typically RFC 1918). Public peering: To access public services in Oracle Cloud Infrastructure without using the internet. For example, Object Storage, the Oracle Cloud Infrastructure Console and APIs, or public load balancers in your VCN. Communication across the connection is with IPv4 public IP addresses. Without FastConnect, the traffic destined for public IP addresses would be routed over the internet.

• Question 64:

  As the Cloud Architect for your company, you have been tasked with designing a high performance (HPC)

  cluster in Oracle Cloud Infrastructure (OCI). The following requirements have been defined:

  The cluster must be a minimum of three nodes, but may increase to six nodes when demand requires.

  The cluster must be resilient to any potential infrastructure failures. To minimize latency, all nodes must be

  deployed within the same availability domain (AD). Adding or replacing nodes within the cluster should

  take no more than 30 minutes. Which two steps should be performed to satisfy these requirements in OCI? (Choose two.)

  A. Deploy the cluster in a single AD with a shared file system that leverages the file storage service (FSS). Deploy a standby cluster in another AD and configure it to use the same shared file system.

  B. Deploy the cluster in a single AD. Place each of the nodes in one of the three different fault domains in that AD.

  C. Create a backup of your HPC node compute instance boot volume. Launch new compute instances directly from the backup reduce provisioning time.

  D. Create a custom image of your HPC node compute instance. Launch new compute instances using this image to reduce provisioning time.

  E. Deploy the cluster in a single AD. Place each of the nodes in a different virtual cloud network (VCN) subnet.

  Correct Answer: BD

  A fault domain is a grouping of hardware and infrastructure within an availability domain. Each availability domain contains three fault domains. Fault domains provide anti-affinity: they let you distribute your instances so that the instances are not on the same physical hardware within a single availability domain. A hardware failure or Compute hardware maintenance event that affects one fault domain does not affect instances in other fault domains. In addition, the physical hardware in a fault domain has independent and redundant power supplies, which prevents a failure in the power supply hardware within one fault domain from affecting other fault domains. To control the placement of your compute instances, bare metal DB system instances, or virtual machine DB system instances, you can optionally specify the fault domain for a new instance or instance pool at launch time. If you don't specify the fault domain, the system selects one for you. Oracle Cloud Infrastructure makes a best-effort anti-affinity placement across different fault domains, while optimizing for available capacity in the availability domain. To change the fault domain for an instance, terminate it and launch a new instance in the preferred fault domain. Use fault domains to do the following things: Protect against unexpected hardware failures or power supply failures. Protect against planned outages because of Compute hardware maintenance.

• Question 65:

  You are designing a high bandwidth, redundant connection between your data center and Oracle Cloud

  Infrastructure (OCI). While researching for OCI FastConnect locations, you notice that you are co-located

  with Oracle at one of the Oracle FastConnect locations in the Ashburn region.

  What is the recommended design in this scenario?

  A. Create a cross-connect group and have two or more cross-connects in that group. Create an IPsec VPN connection on this group.

  B. Setup two IPsec connections between your data center and OCI Ashburn region. Create a OCI load balancer to distribute the traffic across the two connections.

  C. Create a cross-connect group and have at least two or more cross-connects in that group. Create at least two or more virtual circuits in the group.

  D. Create a cross-connect group and have at least one cross-connect in that group. Create at least one virtual circuit in the group.

  Correct Answer: C

  You could have multiple private virtual circuits, for example, to isolate traffic from different parts of your organization (one virtual circuit for 10.0.1.0/24; another for 172.16.0.0/16), or to provide redundancy.

• Question 66:

  Which two statements are true about an Oracle Cloud Infrastructure object storage bucket? (Choose two.)

  A. You can associate a bucket with multiple compartments

  B. You cannot change a bucket from private to public after it is created

  C. You can associate a bucket with only a single compartment

  D. You cannot edit or append data to an object, but you can replace the entire object

  Correct Answer: CD

  A bucket is associated with a single compartment.

  You can't edit or append data to an object, but you can replace the entire object.

• Question 67:

  Which two statements about file storage service (FSS) are accurate? (Choose two.)

  A. FSS leverages UNIX user group and permission checking for file access security

  B. Encryption of file system in FSS is optional

  C. Identity and Access Management (IAM) controls which file systems are mountable by which instances

  D. Security lists can be used as a virtual firewall to prevent an instance from mounting an FSS mount target within the same subnet

  E. Data in transit to an FSS mount target is encrypted

  Correct Answer: AE

  All data is encrypted at rest. and In-transit encryption provides a way to secure your data between instances and mounted file systems using TLS v. 1.2 (Transport Layer Security) encryption. File Storage service supports the AUTH_UNIX style of authentication and permission checking for remote NFS client requests.

• Question 68:

  You are designing a two-tier web application in Oracle Cloud Infrastructure (OCI). Your clients want to

  access the web servers from anywhere, but want to prevent access to the database servers from the

  Internet.

  Which is the recommended way to design the network architecture?

  A. Create public subnets for web servers and private subnets for database servers in your virtual cloud network (VCN), and associate separate internet gateways for each subnet.

  B. Create public subnets for web servers and associate a dynamic routing gateway with that subnet, and a private subnet for database servers with no association to dynamic gateway.

  C. Create public subnets for web servers and private subnets for database servers in your VCN, and associate separate security lists and route tables for each subnet.

  D. Create a single public subnet for your web servers and database servers, and associate only your web servers to internet gateway.

  Correct Answer: C

  When you create a subnet, by default it's considered public, which means instances in that subnet are allowed to have public IP addresses. Whoever launches the instance chooses whether it will have a public

  IP address. You can override that behavior when creating the subnet and request that it be private, which

  means instances launched in the subnet are prohibited from having public IP addresses. Network

  administrators can therefore ensure that instances in the subnet have no internet access, even if the VCN

  has a working internet gateway, and security rules and firewall rules allow the traffic.

  There are two optional gateways (virtual routers) that you can add to your VCN depending on the type of

  internet access you need:

  Internet gateway: For resources with public IP addresses that need to be reached from the internet

  (example: a web server) or need to initiate connections to the internet. NAT gateway: For resources

  without public IP addresses that need to initiate connections to the internet (example: for software updates)

  but need to be protected from inbound connections from the internet.

  Just having an internet gateway alone does not expose the instances in the VCN's subnets directly to the

  internet. The following requirements must also be met:

  The internet gateway must be enabled (by default, the internet gateway is enabled upon creation).

  The subnet must be public.

  The subnet must have a route rule that directs traffic to the internet gateway. The subnet must have

  security list rules that allow the traffic (and each instance's firewall must allow the traffic).

  The instance must have a public IP address.

• Question 69:

  You have an application deployed in Oracle Cloud Infrastructure running only in the Phoenix region. You were asked to create a disaster recovery (DR) plan that will protect against the loss of critical dat

  A. The DR site must be at least 500 miles from your primary site and data transfer between the two sites must not traverse the public Internet. Which is the recommended disaster recovery plan?

  B. Create a new virtual cloud network (VCN) in the Phoenix region and create a subnet in one availability domain (AD) that is not currently being used by your production systems. Establish VCN peering between the production and DR sites.

  C. Create a DR environment in Ashburn. Associate a DRG with the VCN in each region and create a remote peering connection between the two VCNs.

  D. Create a DR environment in Ashburn and provision a FastConnect virtual circuit using DRG between the regions.

  E. Create a DR environment in Ashburn. Associate a dynamic routing gateway (DRG) with the VCN in each region and configure an IPsec VPN connection between the two regions.

  Correct Answer: B

  Remote VCN peering is the process of connecting two VCNs in different regions (but the same tenancy ).

  The peering allows the VCNs' resources to communicate using private IP addresses without routing the

  traffic over the internet or through your on-premises network. Without peering, a given VCN would need an

  internet gateway and public IP addresses for the instances that need to communicate with another VCN in

  a different region.

  At a high level, the Networking service components required for a remote peering include:

  -Two VCNs with non-overlapping CIDRs, in different regions that support remote peering. The VCNs must

  be in the same tenancy.

  -A dynamic routing gateway (DRG) attached to each VCN in the peering relationship. Your VCN already

  has a DRG if you're using an IPSec VPN or an Oracle Cloud Infrastructure FastConnect private virtual

  circuit.

  A remote peering connection (RPC) on each DRG in the peering relationship.

  A connection between those two RPCs.

  Supporting route rules to enable traffic to flow over the connection, and only to and from select subnets in

  the respective VCNs (if desired).

  Supporting security rules to control the types of traffic allowed to and from the instances in the subnets that

  need to communicate with the other VCN.

  

• Question 70:

  You have an application running on Oracle Cloud Infrastructure. You identified that the read and write operations are slowing your application down enough to impair user access. The application is currently using a VM.Standard 1.2 compute without any block storage attached to it. Which two options allow you to increase disk performance? (Choose two.)

  A. Terminate the compute instance preserving the boot volume. Create a new compute instance using a VM Dense IO shape using the boot volume preserved.

  B. Terminate the compute instance preserving the boot volume. Create a new compute instance using a VM Standard shape and attach a new block volume to host your application.

  C. Create a backup of the boot volume. Create a new compute instance using a VM Dense IO shape and restore the backup.

  D. Terminate the compute instance and create a backup of the boot volume. Create a new compute instance using a VM Dense IO shape and restore the backup.

  Correct Answer: AB

  You can permanently terminate (delete) instances that you no longer need.By default, the instance's boot volume is deleted when you terminate the instance, however you can preserve the boot volume associated with the instance, so that you can attach it to a different instance as a data volume, or use it to launch a new instance. You can use a boot volume backup to create an instance or you can attach it to another instance as a data volume. However before you can use a boot volume backup, you need to restore it to a boot volume.