Oracle Oracle Certifications 1Z0-1072-22 Questions & Answers

• Question 191:

  You are a network architect and have designed the network infrastructure of a three-tier application on

  Oracle Cloud Infrastructure (OCI). In the architecture, back-end DB servers are in a private subnet. One of

  your DB administrators requests to have access to OCI object storage service.

  How can you meet this requirement?

  A. Add a new route rule to the private subnet route table to route default traffic to the internet gateway.

  B. Attach a public IP address to the instances in the private subnet, and then add a new route rule to the private subnet route table to route default traffic to the internet gateway.

  C. Create a dynamic routing gateway (DRG) and attach it to your virtual cloud network (VCN). Add a

  default route rule to the private subnets route table and set the target as DRG.

  D. Create a service gateway, add a new route rule to the private subnet route table that uses object storage as target type.

  Correct Answer: D

  A service gateway lets resources in your VCN privately access specific Oracle services, without exposing the data to an internet gateway or NAT. The resources in the VCN can be in a private subnet and use only private IP addresses. The traffic from the VCN to the service of interest travels over the Oracle network fabric and never traverses the internet. To give your VCN access to a given service CIDR label, you must enable that service CIDR label for the VCN's service gateway. You can do that when you create the service gateway, or later after it's created. You can also disable a service CIDR label for the service gateway at any time. For traffic to be routed from a subnet in your VCN to a service gateway, you must add a rule accordingly to the subnet's route table. The rule must use the service gateway as the target. Reference: https://blogs.oracle.com/cloud-infrastructure/connect-private-instances-with-oracle- servicesthrough-anoracle-cloud-infrastructure-service-gateway

• Question 192:

  Which two tagging related items are valid attributes that may be included in payload of an audit log event? (Choose two.)

  A. Predefined values

  B. Free-form tags

  C. Tag variables

  D. Defined tags

  E. Cost-tracking tags

  F. Default tags

  Correct Answer: BD

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Audit/Reference/logeventreference.htm#payload

• Question 193:

  You are managing a tier-1 OLTP application on an Autonomous Transaction Processing (ATP) database.

  Your business needs to run hourly batch processes on this ATP database that may consume more CPUs

  than what is available on the server.

  How can you limit these batch processes to not interfere with the OLTP transactions?

  A. Configure ATP resource management rules to change CPU/IO shares for the consumer group of batch processes.

  B. Copy OLTP data into new tables in a new table space and run batch processes against these new tables.

  C. Disable automated backup during the batch process operations.

  D. ATP is designed for OLTP workload only, you cannot run batch processes on ATP.

  Correct Answer: A

  Autonomous Transaction Processing comes with predefined CPU/IO shares assigned to different consumer groups. You can modify these predefined CPU/IO shares if your workload requires different CPU/IO resource allocations. By default, the CPU/IO shares assigned to the consumer groups TPURGENT, TP, HIGH, MEDIUM, and LOW are 12, 8, 4, 2, and 1, respectively. The shares determine how much CPU/IO resources a consumer group can use with respect to the other consumer groups. With the default settings the consumer group TPURGENT will be able to use 12 times more CPU/IO resources compared to LOW, when needed. The consumer group TP will be able to use 4 times more CPU/IO resources compared to MEDIUM, when needed.

• Question 194:

  You have hired a new employee to run reports from the Autonomous Data Warehouse (ADW) and are not

  confident in their SQL writing ability.

  Into which consumer group will you assign this individual to minimize the impact of their code?

  A. Lowest

  B. Medium

  C. Highest

  D. High

  E. Low

  Correct Answer: E

  in ADW, The tnsnames.ora file provided with the credentials zip file contains three database service names identifiable as high, medium, and low. The predefined service names provide different levels of performance and concurrency for Autonomous Data Warehouse. high: The High database service provides the highest level of resources to each SQL statement resulting in the highest performance, but supports the fewest number of concurrent SQL statements. Any SQL statement in this service can use all the CPU and IO resources in your database. The number of concurrent SQL statements that can be run in this service is 3, this number is independent of the number of OCPUs in your database. medium: The Medium database service provides a lower level of resources to each SQL statement potentially resulting a lower level of performance, but supports more concurrent SQL statements. Any SQL statement in this service can use multiple CPU and IO resources in your database. The number of concurrent SQL statements that can be run in this service depends on the number of OCPUs in your database. low: The Low database service provides the least level of resources to each SQL statement, but supports the most number of concurrent SQL statements. Any SQL statement in this service can use a single CPU and multiple IO resources in your database. The number of concurrent SQL statements that can be run in this service can be up to 300 times the number of OCPUs. The predefined service names provide different levels of performance and concurrency for Autonomous DB Choose whichever database service offers the best balance of performance and concurrency. Use the low database service name. to minimize the impact of their SQLs to by low consumer group

• Question 195:

  You are deploying a highly available web application In Oracle Cloud Infrastructure and have decided to

  use a public load balancer. The back-end web servers will be distributed across all three availability

  domains (ADs).

  How many subnets should you create to deliver a secure, highly available application?

  A. two subnets in total; one regional private subnet to host your back-end web servers and one regional public subnet to host your public load load balancer.

  B. two subnets in total; one regional public subnet to host your back-end web servers and one regional private subnet to host your public load load balancer.

  C. three subnets in total; one regional public subnet to host your back-end web servers and two AD specific private subnets to host your private load load balancer.

  D. one subnet in total; one regional private subnet to host your back-end web servers and your public load balancer.

  Correct Answer: A

  To accept traffic from the internet, you create a public load balancer. The service assigns it a public IP address that serves as the entry point for incoming traffic. You can associate the public IP address with a friendly DNS name through any DNS vendor. A public load balancer is regional in scope. If your region includes multiple availability domains, a public load balancer requires either a regional subnet (recommended) or two availability domain- specific (ADspecific) subnets, each in a separate availability domain. With a regional subnet, the Load Balancing service creates a primary load balancer and a standby load balancer, each in a different availability domain, to ensure accessibility even during an availability domain outage. If you create a load balancer in two AD-specific subnets, one subnet hosts the primary load balancer and the other hosts a standby load balancer. If the primary load balancer fails, the public IP address switches to the secondary load balancer. The service treats the two load balancers as equivalent and you cannot specify which one is "primary". Whether you use regional or AD-specific subnets, each load balancer requires one private IP address from its host subnet. The Load Balancing service supplies a floating public IP address to the primary load balancer. The floating public IP address does not come from your backend subnets. You cannot specify a private subnet for your public load balancer. The backend servers (Compute instances) associated with a backend set can exist anywhere, as long as the associated network security groups (NSGs), security lists, and route tables allow the intended traffic flow. Oracle recommends that you create your load balancer in a regional subnet. Oracle recommends that you distribute your backend servers across all availability domains within the region.

• Question 196:

  Which two statements are true when Oracle Data Guard is configured (using the Console) between two Virtual Machine DB Systems deployed in Oracle Cloud Infrastructure? (Choose two.)

  A. Primary is a 1-node RAC DB system and Standby is a 2-node RAC DB system.

  B. Primary is a 2-node RAC DB system and Standby is a 2-node RAC DB system.

  C. Primary is a 1-node RAC DB system and Standby is a 1-node RAC DB system.

  D. Primary is a 2-node RAC DB system and Standby is a 1-node RAC DB system.

  E. Primary is a Bare Metal DB system and Standby is a 1-node RAC DB system.

  Correct Answer: AC

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Database/Concepts/overview.htm

• Question 197:

  You have been notified of an application failure indicating that one or more of the Oracle Cloud Infrastructure (OCI) resources have become unavailable. After scanning the Compute and Database consoles, you notice that one of the DB Systems is missing. What would you do to identify the reason for this missing resource?

  A. Navigate to the Audit console and search the previous 24 hours for all DELETE request actions to get a list of any resource that was deleted in the past 24 hours.

  B. Navigate to the Audit console and search the previous 24 hours for all the GET request actions to get a list of every event that occurred in the past 24 hours.

  C. View the service limits associated with your account to ensure that you have not exceeded the allowable number of DB Systems in your tenancy.

  D. Create a serial console connection to the DB System that does not appear in the management console. Connect to the serial console connection, and then review the system logs under /var/log/messages.

  Correct Answer: A

  You can filter results by request actions to zero in on only the events with operations that interest you. For example, say that you only want to know about instances that were deleted during a specific time frame. Select a delete request action filter to see only the events with delete operations Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/GSG/Tasks/usingaudit.htm

• Question 198:

  You developed a microservices based application that runs on Oracle Cloud Infrastructure (OCI) Container

  Engine for Kubernetes (OKE). You want to provide access to this cluster to other team members.

  What should you do to provide access to this cluster using as fewest steps as possible?

  A. Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Other team members should use OCI Cloud Shell to generate the kubeconfig into their own cloud shell environment and access the cluster using kubectl from cloud shell.

  B. Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Create individual users and access token for each team member. Other team members should use OCI Cloud Shell to generate the kubeconfig into their own cloud shell environment and access the cluster using kubectl from cloud shell.

  C. Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Create a cluster role and cluster role binding to provide access to the cluster for each team member. Other team members should install oci cli and kubectl locally on their laptop. Use the oci cli to generate the kubeconfig and use kubectl to access the cluster.

  D. Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Other team members should install oci cli and kubectl locally on their laptop. Use the oci cli to generate the kubeconfig and use kubectl to access the cluster.

  Correct Answer: B

• Question 199:

  You create an autoscaling configuration of Linux compute instances in Oracle Cloud Infrastructure (OCI).

  You noticed that your application is running slow. After checking your compute instances, you noticed that

  autoscaling is not launching additional instances,

  even though the existing compute instances already have high memory usage.

  How can you resolve this issue?

  A. Modify the scaling policy to monitor memory usage and scale up the number of instances when it meets the threshold.

  B. Modify the scaling policy to monitor CPU usage and scale up the number of instances when it meets the threshold.

  C. Install the monitoring agent to all compute instances which will trigger the autoscaling group.

  D. Install OCI SDK in all compute instances and create a script that will trigger the autoscaling event if there is high memory usage.

  Correct Answer: B

• Question 200:

  What happens after you successfully run the following command on your Oracle Cloud Infrastructure Container Engine for Kubernetes (OKE) using the YAML file defined below? kubectl create -f definition.yml YAML file ?definition.yml

  

  A. A single Pod with a single container is created.

  B. Two Pods with a container each are created.

  C. A single Pod with two containers is created.

  D. No Pod gets created.

  Correct Answer: C