Pass 1Z0-1067-21 Exam with Updated 1Z0-1067-21 Exam Dumps PDF 2022 [Q17-Q38]

Rate this post

Pass 1Z0-1067-21 Exam with Updated 1Z0-1067-21 Exam Dumps PDF 2022

1Z0-1067-21 Exam Dumps – Free Demo & 365 Day Updates

Oracle 1Z0-1067-21 Exam Syllabus Topics:

Topic	Details
Topic 1	Create and managing alarms Monitoring and Alerting Security and Compliance
Topic 2	Utilize CASB to remediate security vulnerabilities Leverage compartments for resource isolation
Topic 3	Manage infrastructure as code Utilize configuration management tools to control infrastructure Automating Cloud Tasks
Topic 4	Manage automated block storage and database backups Use Object Storage Lifecycle policies for tiered data storage
Topic 5	Leverage automation to control cost Utilize billing tags to track cost Explain how to Implement billing alerts
Topic 6	Create secure access control policies Implement automated notifications Understand Metric Query Language (MQL)
Topic 7	Utilize edge services for automated failover recovery Implement cross-region data copy strategies
Topic 8	Explain user resource manager processes to implement infrastructure as code Use the OCI CLI to simplify repetetive tasks

NEW QUESTION 17
You have a web application running on Oracle Cloud Infrastructure (OCI) that lets users log in with a username and password. You notice that an attacker has tried to use SQL comment “–” to alter the database query, remove the password check and log in as a user. You decide to prevent any future attacks.
Which of the following OCI services or features would you choose to safeguard your application? (Choose the best answer.)

Network Security Group

Data Safe

Web Application Framework (WAF)

Vault

NEW QUESTION 18
You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:

You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet.
Which action would you take to accomplish the task? (Choose the best answer.)

Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the public subnet that hosts the company website.

In default security list, add a stateful rule to allow ingress access on port 443.

Create a new security list with a stateful rule to allow ingress access on port 443 and associate it to the public subnet.

Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the instance that hosts the company website.

NEW QUESTION 19
You have recently joined a startup company and quickly find that nobody is tracking the amount of money spent on Oracle Cloud Infrastructure (OCI). Seeing an opportunity to help save money you begin creating a solution to better track the cost of resources provisioned by each individual on the team.
Which option allows you to identify excessive spend across all resources in your tenancy? (Choose the best answer.)

Use the Python SDK to write a custom application that will monitor the Audit log. Look for CREATEevents and configure the application to send you an email each time a new resource is created.

Create a tag namespace named BILLINGwith a Tag Key named CostCenter. Tag each of your resources with this Tag Key and the correct value.

Use the Events Service and create rules that will act when a new Object Storage bucket or Compute Instance has been created. Have the rule email you each time one of these events occurs.

Create a budget for each compartment that will send a notification when monthly spend reaches a pre- defined amount.

NEW QUESTION 20
You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.

The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the compute instance from the internet. However, you are not able to connect to the web server using your web browser.

Which step will resolve the issue? (Choose the best answer.)

In the route table, add a rule for your default traffic to be routed to NAT gateway.

In the security list, add an ingress rule for port 80 (http).

In the security list, remove the ssh rule.

In the route table, add a rule for your default traffic to be routed to service gateway.

NEW QUESTION 21
Multiple teams are sharing a tenancy in Oracle Cloud Infrastructure (OCI). You are asked to figure out an appropriate method to manage OCI costs.
Which is NOT a valid technique to accurately attribute costs to resources used by each team? (Choose the best answer.)

Create a Cost-Tracking tag. Apply this tag to all resources with team information. Use the OCI cost analysis tools to filter costs by tags.

Create separate compartment for each team. Use the OCI cost analysis tools to filter costs by compartment.

Create an Identity and Access Management (IAM) group for each team. Create an OCI budget for each group to track spending.

Define and use tags for resources used by each team. Analyze usage data from the OCI Usage Report which has detailed information about resources and tags.

NEW QUESTION 22
Which two statements are TRUE about Object Storage data security and encryption in Oracle Cloud Infrastructure (OCI)? (Choose two.)

Client-side encryption is managed by the customer.

Data needs to be decrypted on the client side before retrieving it.

OCI Vault Management is used by default to provide data security.

All traffic to and from Object Storage service is encrypted using TLS.

A VPN connection to OCI is required to ensure secure data transfer to an object storage bucket.

NEW QUESTION 23
Your company recently adopted a hybrid cloud architecture which requires them to migrate some of their on- premises web applications to Oracle Cloud Infrastructure (OCI). You created a Terraform template which automatically provisions OCI resources such as compute instances, load balancer, and a database instance. After running the stack using the terraform apply command, it successfully launched the compute instances and the load balancer, but it failed to create a new database instance with the following error:
Service error: NotAuthorizedOrNotFound. shape VM.Standard2.4 not found. http status code: 404 You discovered that the resource quotas assigned to your compartment prevent you from using VM.Standard2.4 instance shapes available in your tenancy. You edit the Terraform script and replace the shape with VM.Standard2.2 Which option would you recommend to re-run the terraform command to have required OCI resources provisioned with the least effort? (Choose the best answer.)

terraform plan -target=oci_database_db_system.db_system

terraform apply -auto-approve

terraform refresh -target=oci_database_db_system.db_system

terraform apply -target=oci_database_db_system.db_system

NEW QUESTION 24
You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG: NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:

However, after checking the bastion host logs, you discovered that there are IP addresses other than your own that can access your bastion host.
What is the root cause of this issue? (Choose the best answer.)

The Security List allows access to all IP address which overrides the Network Security Group ingress rules.

All compute instances associated with NSG-050504 are also able to connect to the bastion host.

The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.

A netmask of /32 allows all IP address in the 140.19.2.0 network, other than your IP 140.19.2.140

NEW QUESTION 25
You have created a geolocation steering policy in the Oracle Cloud Infrastructure (OCI) Traffic Management service, with this configuration:

What happens to requests that originate in Africa? (Choose the best answer.)

The traffic will be forwarded at the same time to both Pool 1 and Pool 2.

The traffic will be dropped.

The traffic will be forwarded randomly to any of the pools mentioned in the rules.

The traffic will be forwarded to Pool 1. If Pool 1 is not available, then it will be forwarded to Pool 2.

NEW QUESTION 26
A developer has created a file system in Oracle Cloud Infrastructure (OCI) File Storage service. She launches an Oracle Linux compute instance and successfully mounts the file system from the instance.
She then tries writing to the file system from the compute instance using the following command:
touch /mnt/yourmountpoint/helloworld
But gets an error message:
touch: cannot touch ‘/mnt/yourmountpoint/helloworrld’: Permission denied Which is a reason for this error? (Choose the best answer.)

‘touch’ command is not available in Oracle Linux by default.

Service limits or quota for file system writes have been breached.

User is not part of any OCI Identity and Access Management group with write permissions to File Storage service.

User is connecting as the default Oracle Linux user ‘opc’ instead of ‘root’ user.

NEW QUESTION 27
Which option contains the essential components of the Oracle Cloud Infrastructure Notifications service? (Choose the best answer.)

An ALARM with a name unique across the tenancy, a SUBSCRIPTION, and a METRIC with the measurement of interest.

A TOPIC with a name unique across the tenancy, a SUBSCRIPTION, and a MESSAGE where content is published.

A TOPIC with a name unique across the compartment, a SUBSCRIPTION, and a MESSAGE where content is published.

An ALARM with a name unique across the compartment, a SUBSCRIPTION, and a METRIC with the measurement of interest.

NEW QUESTION 28
You have the following compartment structure within your company’s Oracle Cloud Infrastructure (OCI) tenancy:

You want to create a policy in the root compartment to allow SystemAdmins to manage VCNs only in CompartmentC.
Which policy is correct? (Choose the best answer.)

Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentB:CompartmentC

Allow group SystemAdmins to manage virtual-network-family in compartment Root

Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentA:CompartmentB:CompartmentC

Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentC

NEW QUESTION 29
Your customer is running a set of compute instances inside a private subnet to manage their workloads on Oracle Cloud Infrastructure (OCI) tenancy. You have set up auto scaling feature to provide consistent performance to their end users during period of high demand.
Which step should be met for auto scaling to work? (Choose the best answer.)

OS Management Service agent (osms) must be installed on the instances.

Audit logs for the instances should be enabled.

Service gateway should be setup to allow instances to send metrics to monitoring service.

Monitoring for the instances should not be enabled.

NEW QUESTION 30
The boot volume on your Oracle Linux instance has run out of space. Your application has crashed due to a lack of swap space, forcing you to increase the size of the boot volume.
Which step should NOT be included in the process used to solve the issue? (Choose the best answer.)

Reattach the boot volume and restart the instance.

Attach the resized boot volume to a second instance as a data volume; extend the partition and grow the file system in the resized boot volume.

Stop the instance and detach the boot volume.

Resize the boot volume by specifying a larger value than the boot volume’s current size.

Create a RAID 0 configuration to extend the boot volume file system onto another block volume.

NEW QUESTION 31
You have a 750 MIB file in an Oracle Cloud Infrastructure (OCI) Object Storage bucket. You want to download the file in multiple parts to speed up the download using the OCI CLI. You also want to configure each part size to be 128 MIB.
Which is the correct OCI CLI command for this operation? (Choose the best answer.) oci os object get -ns my-namespace -bn my-bucket –name my-large-object —

multipart-download-threshold 750 –parallel-download-count 128
oci os object download -ns my-namespace -bn my-bucket –name my-large-object

–multipart-download-threshold 750 –parallel-download-count 128
oci os object download -ns my-namespace -bn my-bucket –name my-large-object

–resume-put –multipart-download-threshold 500 –part-size 128
oci os object get -ns my-namespace -bn my-bucket –name my-large-object —

multipart-download-threshold 500 –part-size 128

NEW QUESTION 32
You have created a group for several auditors. You assign the following policies to the group:

What actions are the auditors allowed to perform within your tenancy? (Choose the best answer.)

The Auditors can view resources in the tenancy.

Auditors are able to create new instances in the tenancy.

The Auditors are able to delete resource in the tenancy.

Auditors are able to view all resources in the compartment.

NEW QUESTION 33
You have set an alarm to be generated when the CPU usage of a specified instance is greater than 10%. In the alarm behavior view below you notice that the critical condition happened around 23:30. You were expecting a notification after 1 minute, however, the alarm firing state did not begin until 23:33.

What should you change to fix it? (Choose the best answer.)

Change the alarm’s metric interval to 1.

Change the alarm condition to be grater than 3%.

Change the notification topic that you previously associated with the alarm.

Change the alarm’s trigger delay minutes value to 1.

NEW QUESTION 34
Which statement about Oracle Cloud Infrastructure paravirtualized block volume attachments is TRUE? (Choose the best answer.)

Paravirtualized volumes may reduce the maximum IOPS performance for larger block volumes.

Paravirtualized is required to manage iSCSI configuration for virtual machine instances.

Paravirtualized volumes become immediately available on bare metal compute instances.

Paravirtualization utilizes the internal storage stack of compute instance OS and network hardware virtualization to access block volumes.

NEW QUESTION 35
You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively.
You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us-phoenix-1 region only and not any other OCI regions.
What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.)

Allow group PHX-Admins to manage all-resources in tenancy where request.region= ‘phx’

Allow group PHX-Admins to manage all-resources in tenancy where request.permission= ‘phx’

Allow group PHX-Admins to manage all-resources in tenancy where request.target= ‘phx’

Allow group PHX-Admins to manage all-resources in tenancy where request.location= ‘phx’

NEW QUESTION 36
An insurance company has contracted you to help automate their application business continuity plan. They have the application running in eu-frankfurt-1 as the primary site and uk-london-1 as a disaster recovery site. Normally they have a DNS A record associated with the IP address of the primary endpoint in eu-frankfurt-1. In the event of a disaster, they use OCI DNS Zone Management to update the A record and replace it with the IP address of the endpoint in uk-londond-1.
How can you automate the failover process? (Choose the best answer.)

Create a Health Check that evaluates both regional endpoints. Create a Traffic Management Steering policy with Failover type and associate it with the Health Check.

Create a Traffic Management Steering policy with Load Balancer type and add both eu-frankfurt-1 and uk- london-1 endpoints. Attach the Traffic Management Steering policy to the A record.

Provision a Load Balancer in Frankfurt and associate it with the A record in DNS. Create a backend set with backend servers from both eu-frankfurt-1 and uk-london-1 regions.

Create a Traffic Management Steering policy and attach it to a backend servers from both eu-frankfurt-1 and uk-london-1 regions.

NEW QUESTION 37
You are launching a Windows server in your Oracle Cloud Infrastructure (OCI) tenancy. You provided a startup script during instance initialization, but it was not executed successfully.
What is a possible reason for this error? (Choose the best answer.)

Didn’t include anything in user_data.

Wrote a custom script which tried to install GPU drivers.

Ran a cloudbase-init script instead of cloud-init.

Specified a #directive on the first line of your script.

NEW QUESTION 38
You have been contracted by a local e-commerce company to assist with enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet, and a database in a separate, private subnet.
The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically.
After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)

Create a load balancer policy in the Traffic Management service. Configure one answer for each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.

Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A record. Inform customers to prepend the website URL with failover if the primary site is unavailable.

Create a failover policy in the Traffic Management service. Set the IP address of the public load balancer for the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.

Deploy a new load balancer in the primary region. Create one backend set for the primary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.