[Jan-2024] Updated Oracle 1z0-1072-23 Dumps - PDF & Online Engine [Q24-Q41]

NO.24 You have a high-demand web application running on Oracle Cloud Infrastructure (OCI). Your tenancy administrator has set up a schedule-based autoscaling policy on instance pool with an initial size of 5 instances for the application.
Policy 1:
Target pool size:10 instances
Execution time:8:30 a.m. on every Monday through Friday, in every month, in every year Cron expression:0 30 8 ? * MON-FRI * Which statement accurately explains the goal of this policy?

Goal: A one-time schedule with only one scaling out event. At 8:30 a.m., on December 31, 2021, scale the instance pool to 10 instances from 5.

Goal: A recurring monthly schedule. On all days of the month, set the initial pool size to 5 instances. At
8.30 a.m., on every day of the month, scale out to 10 instances.

Goal: A recurring daily schedule. On weekday mornings at 8.30 a.m., scale out to 10 instances.

Goal: A recurring weekly schedule. On all days of the week at 8.30 a.m., scale out the pool to 10 instances from the initial size of 5

NO.25 You need to set up instance principals so that an application running on aninstance can call Oracle CloudInfrastructure (OCI) public services, without the need to configure user credentials.
A developer in your team has already configured the application built using an OCISDK to authenticate using theinstance principals provider.
Which is NOTa necessary step to complete this set up?

Create a dynamic group with matching rules to specify which instances can make API calls against services.

Generate Auth Tokens to enable instances in the dynamic group to authenticate with APIs.

Create a policy granting permissions to the dynamic group to access services in your compartment or tenancy.

Deploy the application and the SDK to all the instances that belong to the dynamic group.

NO.26 You are part of a team that manages a set of workload instances running in an on-premises environment. The Architect team is tasked with designing and configuring Oracle Cloud Infrastructure (OCI) Logging service to collect logs from these instances. There is a requirement to archive Info-level logging data of these instances into the OCI Object Storage.
Which TWO features of OCI can help you achieve this?

Cloud Agent Plugin

Grouping Function

Service Connectors

Agent Configuration

ObjectCollectionRule

NO.27 Which is NOT a valid option for an Oracle Cloud Infrastructure (OCI) compute shape?

Bare Metal

Dedicated Virtual Machine Host

Virtual Machine

Exadata Virtual Machine

NO.28 Which tool provides a diagram of the implemented topology of all Virtual Cloud Networks (VCNs) in a selected region and tenancy?

Network Watcher

Traffic Analytics

VCN Flow Logs

Network Visualizer

NO.29 You are using the Oracle Cloud Infrastructure (OCI) Vault service to create and manage Secrets. For your databasepassword, you have created a secret and rotated the secret one time. The secret versions are as follows:
Version Number | Status
—————————————–
2 (latest) | Current
1 | Previous
You later realize that you have made a mistake in updating the secret content for version 2 and want to rollback to version 1.
What should you do to rollback to version 1?

Deprecate version 2 (latest). Create new Secret version 3. Create soft link from version 3 to version 1.

Create a new secret version 3 and set to Pending. Copy the content of version 1 into version 3.

From the version 2 (latest) menu, select “Rollback” and select version 1 when given the option.

From the version 1 menu on the OCI console, select “Promote to Current”.

NO.30 In which two ways can Oracle Security Zones assist with the cloud security shared responsibility model?

Encrypt storage resources with a customer-managed key.

Allow access to an unsecured compartment, which is moved from a standard compartment.

Deny public access to Oracle Cloud Infrastructure resources, such as databases and object storage buckets.

Add or move a standard compartment to a highly secured security zone compartment.

NO.31 Which is NOT a valid Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) approach?

Ensure not all IP addresses are allocated at once within a VCN or subnet; instead reserve some IP addresses for future use.

Use OCI tags to tag VCN resources so that all resources follow organizational tagging/naming conventions.

Private subnets should ideally have individual route tables to control the flow of traffic within and outside of VCN.

Ensure VCN CIDR prefix overlaps with other VCNs in your tenancy or with your organizations private IP network ranges.

NO.32 Your DevOps team needs to interconnect the on-premises network to the Oracle Cloud Infrastructure (OCI) resources, such as a managed database that resides in a private subnet. They indicate that they have a low budget and their bandwidth requirements are minimal, so you decide that a site-to-site VPN is the best option.
They provide you with their router public IP address. You need to create an object in OCI that represents this router. Which object would you create?

Internet Gateway

Dynamic Routing Gateway (DRG)

Customer Premises Equipment (CPE)

Virtual Network Interface Card (vNIC)

IPSec Tunnel

Bastion Host

NO.33 Which TWO are key benefits of setting up Site-to-Site VPN on Oracle Cloud Infrastructure (OCI)?

When setting up Site-to-Site VPN, it creates a private connection that provides consistent network experience.

When setting up Site-to-Site VPN, customers can configure it to use static or dynamic routing (BGP).

When setting up Site-to-Site VPN, OCI provisions redundant VPN tunnels.

When setting up Site-to-Site VPN, customers can expect bandwidth above 2 Gbps.

NO.34 You are a security administrator for your company’s Oracle Cloud Infrastructure (OCI) tenancy. Your storage administrator informs you that she cannot associate an encryption key from an existing Vault to a new Object Storage bucket.
What could be a possible reason for this behavior?

The Object Storage bucket policy lacks the necessary Access Control List (ACL).

The storage administrator forgot to select “Encrypt using Oracle managed keys” while creating the bucket.

There is no Identity and Access Management (IAM) policy that allows the Object Storage service to use the key.

The secret for the key was not created beforehand

NO.35 You plan to launch a VM instance with the VM.Standard2.24 shape and Oracle Linux 8 platform image. You want to protect your VM instance from low-level threats, such as rootkits and bootkits that can infect the firmware and operating system and are difficult to detect.
What should you do?

Use in-transit encryption.

Use Vulnerability Scanning Service.

Create a burstable instance.

Create a shielded instance.

NO.36 You plan to upload a large file (3 TiB) to Oracle Cloud Infrastructure (OCI) Object Storage. You would like tominimize the impact of network failures while uploading, and therefore you decide to use the multipart upload capability.
Which TWO statements are true about performing a multipart upload using the Multipart Upload API?

You do not need to split the object into parts. Object Storage splits the object into parts and uploads all ofthe parts automatically.

While a multipart upload is still active, you can keep adding parts as long asthe total number is less than10,000.

You do not have to commit the upload after you have uploaded all the object parts.

When you split the object into individual parts, each part can be as large as 50 GiB.

NO.37 You are a system administrator of your company and you are managing a complex environment consisting of compute instances running Oracle Linux on Oracle Cloud Infrastructure (OCI). It’s your task to apply all the latest kernel security updates to all instances.
Which OCI service will allow you to complete this task?

OCI Streaming service

OS Management service

OCI Registry

OCI Security Zones to achieve automatic security updates

OCI Cloud Guard to monitor and install the security updates

NO.38 Which Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) policy is invalid?

Allow dynamic-group FrontEnd to manage instance-family in compartment Project-A

Allow any-user to inspect users in tenancy

Allow group A-Developers to create volumes in compartment Project-A

Allow group A-Admins to manage all-resources in compartment Project-A

NO.39 You created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains a DB System. The application requires a shared file system, therefore you have provisioned one using the file storage service (FSS).
You have also created the corresponding mount target in one of the application subnets. The VCN security lists are properly configured so that the application servers can access FSS. The security team changed the settings for the DB System to have read-only access to the file system. However when they test it, they are unable to access FSS.
How would you allow access to FSS?

Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet.

Create an instance principal for the DB System. Write an Identity and Access Management (IAM) policy that allows the instance principal read-only access to the file storage service.

Modify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateless.

Modify the security list associated with the subnet where the mount target resides.

Change the ingress rules corresponding to the DB System subnet to be stateful.

NO.40 Which THREE protocols are supported by the Oracle Cloud Infrastructure (OCI) Network Load Balancer?

HTTP

UDP

BGP

TCP

ICMP

iSCSI

NO.41 You have a block volume created in the US West (Phoenix) region. You enabled Cross Region Replication for thevolume and selected US West (San Jose) as the destination region. Now, you would like to create a new volumefrom the volume replica in the US West (San Jose) region.
What should you do?

Activate the replica.

Trigger the replica.

No action required. By default, the replica is available as a block volume.

Initiate the replica.