Oracle Oracle Certifications 1Z0-1072-22 Questions & Answers

• Question 211:

  Which two statements are true about Oracle Cloud Infrastructure storage services?

  A. You can move Object Storage buckets, Block Volumes and File Storage mount targets between compartments.

  B. File storage mount target does not provide a private IP address, while the Object Storage bucket provides one.

  C. File Storage uses the network file system (NFS) protocol, whereas Block Volume uses ISCSI.

  D. Block Volume service scales to Exabytes per Instance, while File Storage service offers unlimited scalability.

  E. You can take Incremental snapshots of Block Volumes, File Storage file systems and Object Storage buckets.

  Correct Answer: AC

• Question 212:

  When you try to create an instance on Oracle Cloud Infrastructure (OCI), what are three valid sources to choose the image from?

  A. Dedicated VM Host

  B. Object Storage

  C. Bare Metal Instance

  D. Platform Images

  E. Custom Image

  F. Partner Images

  G. Instance Pools

  Correct Answer: DEF

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Compute/Tasks/launchinginstance.htm

• Question 213:

  Which two statements about Oracle Cloud Infrastructure File Storage Service are accurate? (Choose two.)

  A. Customer can encrypt the communication to a mount target via export options.

  B. Mount targets use Oracle-managed keys by default.

  C. File systems use Oracle-managed keys by default.

  D. Customer can encrypt data in their file system using their own Vault encryption key.

  E. Communication with file systems in a mount target is encrypted via HTTPS.

  Correct Answer: BD

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/File/Concepts/filestorageoverview.htm

• Question 214:

  Your company has been running several small applications in Oracle Cloud Infrastructure and is planning a proof-of-concept (POC) to deploy PeopleSoft. If your existing resources are being maintained in the root compartment, what is the recommended approach for defining security for the upcoming POC?

  A. Create a new compartment for the POC and grant appropriate permissions to create and manage resources within the compartment.

  B. Provision all new resources into the root compartment. Grant permissions that only allow for creation and management of resources specific to the POC.

  C. Provision all new resources into the root compartment. Use defined tags to separate resources that belong to different applications.

  D. Create a new tenancy for the POC. Provision all new resources into the root compartment. Grant appropriate permissions to create and manage resources within the root compartment.

  Correct Answer: A

  If your organization is small, or if you are still in the proof-of-concept stage of evaluating Oracle Cloud Infrastructure, consider placing all of your resources in the root compartment (tenancy). This approach makes it easy for you to quickly view and manage all your resources. You can still write policies and create groups to restrict permissions on specific resources to only the users who need access. If you plan to maintain all your resources in the root compartment, we recommend setting up a separate sandbox compartment to give users a dedicated space to try out features. In the sandbox compartment, you can grant users permissions to create and manage resources, while maintaining stricter permissions on the resources in your tenancy (root) compartment. https://www.oracle.com/a/ocom/docs/best-practicesfor-iam-on-oci.pdf

• Question 215:

  Which two resources reside exclusively in a single Oracle Cloud Infrastructure Availability Domain? (Choose two.)

  A. Identity and Access Management Groups

  B. Object Storage

  C. Web Application Firewall policy

  D. Block volume

  E. Compute instance

  Correct Answer: DE

  Availability Domain-Specific Resources DB Systems ephemeral public IPs instances: They can be attached only to volumes in the same availability domain. subnets: When you create a subnet, you choose whether it is regional or specific to an availability domain. Oracle recommends using regional subnets. volumes: They can be attached only to an instance in the same availability domain.

• Question 216:

  Which statement Is true about Data Guard implementation in Oracle Cloud Infrastructure (OCI) bare metal and virtual machine database systems?

  A. Primary and standby databases must be in the same OCI region.

  B. Both database systems must be in the same compartment.

  C. Database systems need not be the same shape type (e.g, primary database can be a virtual machine, and standby database a bare metal shape, and vice versa).

  D. Primary and standby database versions and editions need not be Identical.

  Correct Answer: B

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Database/Tasks/exausingdataguard.htm

• Question 217:

  Your company uses the Oracle Cloud Infrastructure (OCI) Object Storage service to share large data sets with its data science team. The data science team consists of 20 people who work from offices in Washington, D.C., and Tokyo. While working in these offices, employees are assigned an IP address from the public IP range 129.146.31.0/27 Which two steps should you take to ensure that the Object Storage bucket used in this scenario was only accessible from these office locations? (Choose two.)

  A. Write an IAM policy that includes the conditional statement where request.networkSource.name =CorpNet

  B. Set the bucket visibility to public and only share the URL with the data science team via email

  C. Create a pre-authenticated request for each data set and only share with the data science team via email

  D. Create a Network Source named CorpNetwork with a CIDR block of 129.146.31.0/27

  E. Create a Network Source named CorpNetwork with a CIDR block of 129.146.0.0/16

  F. Write an IAM policy that includes the conditional statement where request.region = 129.146.31.0/27

  Correct Answer: CE

• Question 218:

  You have created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains a DB System. The application requires a shared file system so you have provisioned one using the file storage service (FSS). You also created the corresponding mount target in one of the application subnets. The VCN security lists are properly configured so that both application servers and the DB System can access the file system. The security team determines that the DB System should have read-only access to the file system. What change would you make to satisfy this requirement?

  A. Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet.

  B. Connect via SSH to one of the application servers where the file system has been mounted. Use the Unix command chmod to change permissions on the file system directory, allowing the database user read only access.

  C. Modify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateless.

  D. Create an instance principal for the DB System. Write an Identity and Access Management (IAM) policy that allows the instance principal read-only access to the file storage service.

  Correct Answer: A

  NFS export options enable you to create more granular access control than is possible using just security list rules to limit VCN access. You can use NFS export options to specify access levels for IP addresses or CIDR blocks connecting to file systems through exports in a mount target.

• Question 219:

  You deployed a database on a Standard Compute instance in Oracle Cloud Infrastructure (OCI) due to

  cost concerns. The database requires additional storage with high I/O and you decided to use OCI Block

  Volume service for it.

  With this requirement in mind, which elastic performance option should you choose for the Block Volume?

  A. Balanced Performance

  B. Higher performance

  C. Extreme performance

  D. Lower cost

  Correct Answer: B

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Block/Concepts/blockvolumeperformance.htm

• Question 220:

  Which option is NOT a valid action within the Oracle Cloud Infrastructure (OCI) Block Volume service?

  A. Clone an existing volume to a new, larger volume.

  B. Restore from a volume backup to a larger volume.

  C. Shrink an existing volume in place with offline resizing.

  D. Expand an existing volume in place with offline resizing.

  Correct Answer: C