Oracle Oracle Certifications 1Z0-1072-22 Questions & Answers

• Question 181:

  Which two parameters are required in a back end set's HTTP health check? (Choose two.)

  A. response body

  B. URL path

  C. timeout

  D. port

  E. status code

  Correct Answer: BD

  https://docs.cloud.oracle.com/iaas/Content/GSG/Tasks/loadbalancing.htm#Create Enter the Health Check

  details.

  Load Balancing automatically checks the health of the instances for your load balancer. If it detects an

  unhealthy instance, it stops sending traffic to the instance and reroutes traffic to healthy instances. In this

  step, you provide the information required to check the health of servers in the backend set and ensure

  that they can receive data traffic.

  Protocol: Select HTTP.

  Port: Enter 80

  URL Path (URI): Enter /

  The rest of the fields are optional and can be left blank for this tutorial.

  Click Create.

• Question 182:

  You are working for a financial institution that is currently running two web applications in Oracle Cloud

  Infrastructure (OCI). All resources were created in the root compartment. Your manager asked you to

  deploy new resources to support a proof-of-concept (PoC) for Oracle FlexCube.

  You must ensure that the FlexCube resources are secured and cannot be affected by the team that

  manages the two web applications.

  Which two tasks should you complete to ensure the required security of your resources? (Choose two.)

  A. Create a new compartment for the two web applications and move the existing resources into the compartment. Deploy the FlexCube application into the root compartment. Create a new policy in the root compartment that gives the FlexCube project team the ability to manage all resources in the tenancy.

  B. Create a new policy in the root compartment for the FlexCube project team. Assign a policy statement that grants the FlexCube project team the ability to manage all resources in the tenancy, where a specific tag key and tag value are present.

  C. Create a Tag Default within the root compartment with a default value of ${iam.principle.name} so that each new resource created is tagged with the name of the person who created it. Create a new IAM policy that allows users to only modify resources they created.

  D. Create a new compartment for the two web applications and move the existing resources into this compartment. Modify the existing policy for the team that manages these applications so that the scope of access is defined as this new compartment.

  E. Create a new compartment for the FlexCube application deployment. Create a policy in this compartment for the project team that gives them the ability to manage all resources within the scope of this compartment.

  Correct Answer: CD

• Question 183:

  You have compartments C and D under the root compartment in your Oracle Cloud Infrastructure (OCI) tenancy; compartment C contains a sub-compartment also named D. You are trying to move this sub-compartment D to the parent compartment D like shown in the picture, but the move fails.

  

  What is the reason for this error?

  A. You need to move all the compartments in the hierarchy to the new parent compartment.

  B. You cannot move a subcompartment to another parent compartment.

  C. Both parent and child compartments cannot have the same name.

  D. Sub-compartment D needs to be empty before it can be moved.

  Correct Answer: C

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/managingcompartments.htm (restriction on moving compartments)

• Question 184:

  As an Oracle Cloud Infrastructure tenancy administrator, you created predefined lists of values and

  associated them with tag key definitions.

  One of the users in your tenancy complains that she cannot see these predefined values.

  What is causing this issue?

  A. The user is trying to use free-form tags.

  B. Some of the predefined values are null.

  C. The user is not part of an Identity and Access Management group that gives access to tagging.

  D. The user has breached either the quota or service limit for using tags.

  Correct Answer: A

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Tagging/Tasks/usingpredefinedvalues.htm

• Question 185:

  You are responsible for creating and maintaining an enterprise application that consists of multiple storage volumes across multiple compute instances in Oracle Cloud Infrastructure (OCI). The storage volumes include boot volumes and block volumes for your data storage. You need to create backups of these storage volumes in the most time-efficient manner. How can you meet this requirement?

  A. Create clones of all boot volumes and block volumes one at a time.

  B. Create on-demand full backups of boot volumes, and copy data in block volumes to Object Storage using OCI CLI.

  C. Create on-demand full backups of block volumes, and create custom images from the boot volumes.

  D. Group together multiple storage volumes in a volume group and create volume group backups.

  Correct Answer: D

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Block/Concepts/volumegroups.htm

• Question 186:

  Which two choices are true for Oracle Autonomous Database with Shared Exadata Infrastructure?

  A. Billing for storage usage continues when autonomous database is stopped.

  B. Billing stops for both CPU and storage usage when autonomous database is stopped.

  C. Billing for compute usage stops when autonomous database is stopped.

  D. Autonomous database does not support per-second billing.

  E. Billing does not stop when autonomous database is terminated.

  Correct Answer: AC

• Question 187:

  You have an application server running in a public subnet on a compute instance in US West (us- phoenix1) region of Oracle Cloud Infrastructure (OCI). The data sitting on this instance needs to be copied to OCI Object storage bucket available in the same region without traversing over the internet. To enable the connectivity between the instance and Object Storage, you created a service gateway with service CIDR of all Object Storage in us-phoenix-1 enabled. You also modified the security rules to allow the desired traffic. However, when you tried sending the data to the Object Storage bucket, you notice that the data is going over the internet and not via the service gateway. What could be the possible reason for this behavior?

  A. The route table associated with the subnet has no route rule where the destination is object storage service

  B. The service gateway created in the VCN resides in a different availability domain

  C. The security list associated with the subnet has an egress rule that allows all traffic to be forwarded to a destination CIDR 0.0.0.0/0

  D. Identity and Access Management (IAM) policies restrict the access to the object storage bucket

  Correct Answer: A

• Question 188:

  You have multiple applications installed on a compute instance and these applications generate a large amount of log files. These log files must reside on the boot volume for a minimum of 15 days and must be retained for at least 60 days. The 60-day retention requirement is causing an issue with available disk space. What are the two recommended methods to provide additional boot volume space for this compute instance? (Choose two.)

  A. Terminate the instance while preserving the boot volume. Create a new instance from the boot volume and select a DenseIO shape to take advantage of local NVMe storage.

  B. Create an object storage bucket and use a script that runs daily to move log files older than 15 days to the bucket.

  C. Create and attach a block volume to the compute instance and copy the log files.

  D. Create a custom image and launch a new compute instance with a larger boot volume size.

  E. Write a custom script to remove the log files on a daily basis and free up the space on the boot volume.

  Correct Answer: BD

  These log files must reside on the boot volume for a minimum of 15 days so you have to increase the boot Volume

• Question 189:

  Your customer is using an Oracle Cloud Infrastructure (OCI) compartment named Production that hosts several resources such as compute instances, DB Systems and File Systems. Each resource in the Production compartment is tagged. The customer's security team wants to restrict access to DB Systems to only the authorized group of DBAs.

  Which OCI Tagging capability can be used to meet this requirement?

  A. Tags Defaults with predefined values

  B. Tag Defaults

  C. Cost-Tracking Tags

  D. Tag-based Access Control

  Correct Answer: D

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/Tagging/Tasks/ managingaccesswithtags.htm#about

• Question 190:

  A customer has launched a compute Instance in the Virtual Cloud Network (VCN), which has an Internet gateway, a service gateway, a default security lists and a default route table. Customer has opened up Port 22 in the security lists attached to the compute instance subnet, however is still unable to connect to compute instances using ssh. Which option would remedy this situation?

  A. Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table. Destination CIDR: 0.0.0.0/0 Target: Internet Gateway (IGW)

  B. Modify the security list associated with the VCN subnet in which the instance resides. Add a stateful egress rule to allow icmp traffic in addition to the port 22.

  C. Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table. Destination CIDR: 0.0.0.0/0 Target: Dynamic Routing Gateway (DRG)

  D. Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table. Destination CIDR: 0.0.0.0/0 Target: Service Gateway (SGW)

  Correct Answer: A

  You create an internet gateway in the context of a specific VCN. In other words, the internet gateway is automatically attached to a VCN. However, you can disable and re-enable the internet gateway at any time. For traffic to flow between a subnet and an internet gateway, you must create a route rule accordingly in the subnet's route table (for example, destination CIDR = 0.0.0.0/0 and target = internet gateway). If the internet gateway is disabled, that means no traffic will flow to or from the internet even if there's a route rule that enables that traffic. For the purposes of access control, you must specify the compartment where you want the internet gateway to reside. If you're not sure which compartment to use, put the internet gateway in the same compartment as the cloud network.