Latest Jul 14, 2022 1Z0-1072-20 Brain Dump A Study Guide with Tips & Tricks for passing Exam [Q142-Q163]

Posted On July 14, 2022

Latest Jul 14, 2022 1Z0-1072-20 Brain Dump: A Study Guide with Tips & Tricks for passing Exam

1Z0-1072-20 Question Bank: Free PDF Download Recently Updated Questions

NO.142 Which statement is true about Oracle Cloud Identifiers (OCID)?

mytenancy.oc.ocid is a valid OCID.

If you delete a user, and them create a new user with the same name, the user will be considered a different user because of different OCIDs.

Users can customize OCIDs for all the resources in their compartments.

If you delete a user, and then create a new user with the same name, the new user will be assigned the exact same OCIDs as the system remembers.

NO.143 What happens when you run terraform plan?

It configures, reconfigures, and instantiates resources and their dependencies.

It shows the operator the course of action that would be taken if a change is applied.

It deletes all existing resources and re-creates them.

It shows a dependency graph.

NO.144 Your customer is using an Oracle Cloud Infrastructure (OCI) compartment named Production that hosts several resources such as compute instances, DB Systems and File Systems. Each resource in the Production compartment is tagged.
The customer’s security team wants to restrict access to DB Systems to only the authorized group of DBAs.
Which OCI Tagging capability can be used to meet this requirement?

Tags Defaults with predefined values

Tag Defaults

Cost-Tracking Tags

Tag-based Access Control

NO.145 Which option lists Virtual Cloud Networks (VCNs) that can be peered?

VCN A (172.16.0.0/24) and VCN B (172.16.0.0/28)

VCN A (10.0.0.0/16) and VCN B (10.1.0.0/16)

VCN A (10.0.2.0/16) and VCN B (10.0.2.0/25)

VCN A (10.0.0.0/16) and VCN B (10.0.16.0/24)

NO.146 How can you provide users access to an existing compartment?

by granting users access to a compartment when the compartment is created

by adding users to a group and defining a policy to provide the group access to the compartment

by adding users to a compartment. All users in the compartment will have access to the objects in the compartment.

by granting access directly to the user when the user is created

NO.147 You created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains a DB System. The application requires a shared file system so you have provisioned one using the file storage service (FSS).
You also created the corresponding mount target in one of the application subnets. The VCN security lists are properly configured so that both application servers and the DB system can access the file system. The security team determines that the DB System should have read-only access to the file system.
What change should you make to satisfy this requirement?

Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet.

Modify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateless.

Create an instance principal for the DB System. Write an Identity and Access Management (IAM) policy that allows the instance principal read-only access to the file storage service.

Connect via SSH to one of the application servers where the file system has been mounted. Use the Unix command chmod to change permissions on the file system directory, allowing the database user read only access.

NO.148 Which statement is true about DB Systems?

Data Guard as a Service is offered between regions.

You cannot manage the database as sys/sysdba.

You have full control over the automatic backup schedule and retention periods.

You can manage Oracle database initialization parameters at a global level.

NO.149 When you try to create an instance on Oracle Cloud Infrastructure (OCI), what are three valid sources to choose the image from? (Choose three.)

Dedicated VM Host

Object Storage

Bare Metal Instance

Platform Images

Custom Image

Partner Images

Instance Pools

NO.150 Which three types of credentials are used to manage Oracle Cloud Infrastructure Identity and Access Management (IAM)? (Choose three.)

Windows Password

API Signing Key

Swift Password

SSH Key

Console Password

NO.151 Which is a customer’s responsibility on an Oracle Cloud Infrastructure database?

patching the database and OS

creating the first default database on the DBCS server

creating an ASM diskgroup for data file or temp file storage

installing the operating system (OS), Grid Infrastructure, and database software

NO.152 Your on-premises hosted application uses Oracle database server. Your database administrator must have access to the database server for managing the application. Your database server is sized for seasonal peak workloads, which results in high licensing costs. You want to move your application to Oracle Cloud Infrastructure (OCI) to take advantage of CPU scaling options.
Which database offering on OCI would you select?

bare metal DB systems

VM DB systems

Autonomous Transactions Processing (ATP)

Autonomous Data Warehouse (ADW)

NO.153 Which two Oracle Cloud Infrastructure services use a Dynamic Routing Gateway?

OCI FastConnect Public Peering

Local Peering

OCI FastConnect Private Peering

Internet Gateway

OCI IPSec VPN Connect

NO.154 Which two statements are true about Oracle Cloud Infrastructure IPSec VPN Connect?

Each OCI IPSec VPN consists of multiple redundant IPSec tunnels

OCI IPSec VPN tunnel supports only static routes to route traffic

OCI IPSec VPN can be configured in tunnel mode only

OCI IPSec VPN can be configured in trans port mode only

NO.155 Which two configuration formats does Terraform support? (Choose two.)

YAML

JSON

HCL

XML

NO.156 You want an Oracle Cloud Infrastructure (OCI) compute instance in your compartment to make API calls to other services within OCI without storing credentials in a configuration file.
What do you need to do?

Create a dynamic group with appropriate matching rules to include the instance, and reference this group in your IAM policy statement

Instances cannot access services outside their compartment

VM instances are treated as users. Create a user, assign the user to that VM instance, and reference the instance in your Identity and Access Management (IAM) policy statement

By default, all VM instances are created with an instance principal. Reference this instance principal in your IAM policy statement

NO.157 You are a network architect and have designed the network infrastructure of a three-tier application on Oracle Cloud Infrastructure (OCI). In the architecture, back-end DB servers are in a private subnet. One of your DB administrators requests to have access to OCI object storage service.
How can you meet this requirement?

Create a service gateway, add a new route rule to the private subnet route table that uses storage as your service gateway target type

Create a dynamic routing gateway (DRG) and attach it your virtual cloud network (VCN). Add a default route rule to the private subnets route table and set the target as DRG

Attach a public IP address to the instances in the private subnet, and then add a new route rule to the private subnet route table to route default traffic to the internet gateway

Add a new route rule to the private subnet route table to route default traffic to the internet gateway

NO.158 You are designing a shared storage solution for your company in Oracle Cloud Infrastructure. The proposed storage solution should allow users to create a hierarchical structure (similar to the directory structure in Linux or Windows based systems). The solution should provide data encryption and a large amount of storage space.
Which would be the best implementation strategy?

Use object storage. Create multiple namespaces with one bucket each. Make the buckets publicly accessible.

Use block storage. Create and attach a large block storage volume to one compute instance. Assign a public IP to the compute instance. Store data on the block storage and access it by connecting to the compute instance.

Use object storage. Create a single namespace and multiple buckets to create the hierarchical directory structure.

Use file storage service. Create a file system and a mount target. Share the private IP of the mount target.

NO.159 You developed a microservices based application that runs on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). You want to provide access to this cluster to other team members.
What should you do to provide access to this cluster using as fewest steps as possible?

Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Other team members should use OCI Cloud Shell to generate the kubeconfig into their own cloud shell environment and access the cluster using kubectl from cloud shell.

Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Create individual users and access token for each team member. Other team members should use OCI Cloud Shell to generate the kubeconfig into their own cloud shell environment and access the cluster using kubectl from cloud shell.

Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Create a cluster role and cluster role binding to provide access to the cluster for each team member. Other team members should install oci cli and kubectl locally on their laptop. Use the oci cli to generate the kubeconfig and use kubectl to access the cluster.

Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Other team members should install oci cli and kubectl locally on their laptop. Use the oci cli to generate the kubeconfig and use kubectl to access the cluster.

NO.160 Which two tools would you use to manage Database Cloud Service (DBCS)? (Choose two.)

psql

Oracle Swingbench

SQL Developer

Oracle Enterprise Manager

NO.161 Which two tagging related items are valid attributes that may be included in payload of an audit log event? (Choose two.)

Predefined values

Free-form tags

Tag variables

Defined tags

Cost-tracking tags

Default tags

NO.162 Your company has decided to move a few applications to Oracle Cloud and you have been asked to design it for both High Availability (HA) and Disaster Recovery (DR).
Which two should you consider while designing your Oracle Cloud Infrastructure architecture? (Choose two.)

Region

Instance Shape

Compartments

Availability Domain

NO.163 You had an outage in your application caused by the loss of a shared volume provisioned by File Storage Service (FSS). At this point, you need to restore the data from a snapshot you created of the FSS.
What are the steps to restore the data?

Access the directory where the shared volume is mounted, then cd into .snapshot folder, find the snapshot folder you want to recover and use cp or rsync tool to copy the files to the original location.

Open OCI Console, select File Storage Service, find the shared storage, then click on snapshot and restore.

Open OCI Console, select File Storage Service, find the snapshot you created and click restore.

Access the directory, where you mounted the shared volume, then cd into .snapshot folder and find the snapshot folder you want to recover and rename that folder to the original folder name.