[Dec 24, 2023] Pass 1z0-1072-22 Review Guide, Reliable 1z0-1072-22 Test Engine
1z0-1072-22 Test Engine Practice Test Questions, Exam Dumps
Oracle 1z0-1072-22 exam is designed for IT professionals who want to validate their skills and knowledge in Oracle Cloud Infrastructure. 1z0-1072-22 exam is targeted towards individuals who are seeking to become an Oracle Cloud Infrastructure 2022 Architect Associate. 1z0-1072-22 exam tests candidates on their knowledge of various cloud infrastructure services, including compute, storage, networking, and database services.
NEW QUESTION # 45
Which two statements define the types of DNS resolvers that exist? (Choose two.)
- A. An Internet resolver allows instances to use the host names that are published on the Internet.
- B. A VCN resolverallows instances to use host names to communicate with instances on other VCNs in your tenancy.
- C. A VCN resolver allows instances to use the host names of the hosts in your on-prem network that are connected to your VCN by an IPSec VPN connection.
- D. A custom resolver allows instances to use the host names of the hosts in your on-prem network that are connected to your VCN by an IPSec VPN connection.
Answer: A,D
Explanation:
Explanation
https://docs.cloud.oracle.com/iaas/Content/Network/Concepts/dns.htm
This is an Oracle-provided option that includes two parts:Internet Resolver: Lets instances resolve hostnames that are publicly published on theinternet. The instances do not need to have internet access by way of either an internet gateway or a connection to your on-premises network (such as an IPSec VPN connection through a DRG ).VCN Resolver: Lets instances resolve hostnames (which you can assign) of other instances in the same VCN. For more information, see About the DNS Domains and Hostnames.By default, new VCNs you create use the Internet and VCN Resolver. If you're using the Networking API, this choice refers to the VcnLocalPlusInternet enum in the DhcpDnsOption object.
The Internet and VCN Resolver does not let instances resolve the hostnames of hosts in your on-premises network connected to your VCN by IPSec VPN connection or FastConnect. Use your own custom DNS resolver to enable that.
https://docs.cloud.oracle.com/iaas/Content/Network/Concepts/dns.htm?Highlight=DNS%20resolver#About
NEW QUESTION # 46
D18912E1457D5D1DDCBD40AB3BF70D5D
You are a system administrator of your company and you are asked to manage updates and patches across all your compute instances running Oracle Linux in Oracle CloudInfrastructure (OCI). As part of your task, you need to apply all the latest kernel security updates to all instances.
Which OCI service will allow you to complete this task?
- A. Registry
- B. Resource Manager
- C. OS Management
- D. Storage Gateway
- E. Streaming
Answer: C
Explanation:
Reference:https://blogs.oracle.com/cloud-infrastructure/os-management-with-oracle-cloud-infrastructure
NEW QUESTION # 47
A company currently uses Microsoft Active Directory as its identity provider. The company recently purchased Oracle Cloud Infrastructure (OCI) to leverage the cloud platform for its test and development operations. As the administrator, you are now tasked with giving access only to developers so that they can start creating resources in their OCI accounts.
Which step will you perform to achieve this requirement?
- A. Create a new user account for each user, and then create policies to provide access to developers.
- B. Create a group for developers on OCI, export all the developers from Microsoft Active Directory, and then import them into the Identity and Access Management (IAM) group.
- C. Federate all Microsoft Active Directory groups with OCI to allow users to use their existing credentials.
- D. Create a group for developers on OCI and map the group to a similar group in Microsoft Active Directory during the federation process.
Answer: D
NEW QUESTION # 48
What is the default backup location for database backup on Database Cloud Service (DBCS)?
- A. ASM diskgroup
- B. locally attached NVMe on Virtual Machine
- C. Object Storage on Oracle Cloud Infrastructure
- D. block volume
Answer: C
Explanation:
Explanation
References:https://docs.oracle.com/en/cloud/paas/database-dbaas-cloud/csdbi/backing.html
NEW QUESTION # 49
You have an application server running in a public subnet on a compute instance in US West (us-phoenix-1) region of Oracle Cloud Infrastructure (OCI).The data sitting on this instance needs to be copied to OCI Object storage bucket available in the same region without traversing over the internet. To enable the connectivity between the instance and Object Storage, you created a service gateway with service CIDR of all Object Storage in us-phoenix-1 enabled. You also modified the security rules to allow the desired traffic.
However, when you tried sending the data to the Object Storage bucket, you notice that the data is going over the internet and not via the service gateway.
What could be the possible reason for this behavior?
- A. The security list associated with the subnet has an egress rule that allows all traffic to be forwarded to a destination CIDR 0.0.0.0/0
- B. The route table associated with the subnet has no route rule where the destination is object storage service
- C. Identity and Access Management (IAM) policies restrict the access to the object storage bucket
- D. The service gateway created in the VCN resides in a differentavailability domain
Answer: B
NEW QUESTION # 50
You are deploying a highly available web application InOracle Cloud Infrastructure and have decided to use a public load balancer. The back-end web servers will be distributed across all three availability domains (ADs).
How many subnets should you create to deliver a secure, highly available application?
- A. three subnets in total; one regional public subnet to host your back-end web servers and two AD specific private subnets to host your private load load balancer.
- B. two subnets in total; one regional public subnet to host your back-end web servers and one regional private subnet to host your public load load balancer.
- C. two subnets in total; one regional private subnet to host your back-end web servers and one regional public subnet to host your public load load balancer.
- D. one subnet in total; one regional private subnet to host your back-end web servers and your public load balancer.
Answer: C
Explanation:
Explanation
To accept traffic from the internet, you create a public load balancer. The service assigns it a public IP address that serves as the entry point for incoming traffic. You can associate the public IP address with a friendly DNS name through any DNS vendor.
A public load balancer is regional in scope. If your region includes multiple availability domains, a public load balancer requires either a regional subnet (recommended) or two availability domain-specific (AD-specific) subnets, each in a separate availability domain. With a regional subnet, the Load Balancing service creates a primary load balancer and a standby load balancer, each in a different availability domain, to ensure accessibility even during an availability domain outage. If you create a load balancer in two AD-specific subnets, one subnet hosts the primary load balancer and the other hosts a standby load balancer. If the primary load balancer fails,the public IP address switches to the secondary load balancer. The service treats the two load balancers as equivalent and you cannot specify which one is "primary".
Whether you use regional or AD-specific subnets, each load balancer requires one privateIP address from its host subnet. The Load Balancing service supplies a floating public IP address to the primary load balancer.
The floating public IP address does not come from your backend subnets.
You cannot specify a private subnet for your public load balancer.
The backend servers (Compute instances) associated with a backend set can exist anywhere, as long as the associated network security groups (NSGs), security lists, and route tables allow the intended traffic flow.
Oracle recommends that you create your load balancer in a regional subnet.
Oracle recommends that you distribute your backend servers across all availability domains within the region.
NEW QUESTION # 51
What happens when you run terraform plan?
- A. It deletes all existing resources and re-creates them.
- B. It configures, reconfigures, and instantiates resources and their dependencies.
- C. It shows the operator the course of action that would be taken if a change is applied.
- D. It shows a dependency graph.
Answer: C
Explanation:
Reference:
The terraform plan command is used to create an execution plan. Terraform performs a refresh, unless explicitly disabled, and then determines what actions are necessary to achieve the desired state specified in the configuration files.
This command is a convenient way to check whether the execution plan for a set of changes matches your expectations without making any changes to real resources or to the state. For example, terraform plan might be run before committing a change to version control, to create confidence that it will behave as expected.
NEW QUESTION # 52
When terminating a compute instance, which statement is true?
- A. The instance needs to be stopped first, and then terminated.
- B. All block volumes attached to the instance are terminated.
- C. The boot volume is always deleted.
- D. Users can preserve the boot volume associated with the instance.
Answer: D
Explanation:
You can permanently terminate (delete) instances that you no longer need. Any attached VNICs and volumes are automatically detached when the instance terminates. Eventually, the instance's public and private IP addresses are released and become available for other instances. By default, the instance's boot volume is deleted when you terminate the instance, however you can preserve the boot volume associated with the instance, so that you can attach it to a different instance as a data volume, or use it to launch a new instance.
NEW QUESTION # 53
Which certificate format is used with the load balancer?
- A. CRT
- B. PFX
- C. PKCS12
- D. PEM
Answer: D
Explanation:
https://docs.cloud.oracle.com/iaas/Content/Balance/Tasks/managingcertificates.htm
NEW QUESTION # 54
A customer has established anOracle Cloud Infrastructure (OCI) FastConnect connection to OCI. The virtual circuit is up and routes are being advertised from the customer's end, however the customer is unable to ping from compute instances inside the virtual cloud network (VCN) to servers residing in its on-premises data center.
Which two options on OCI would remedy this situation? (Choose two.)
- A. Modify the default VCN route table to add a route back to the customer's on-premises network via the DRG.
- B. Modify the security list associated with the VCN subnet in which the instance resides. Add a stateful egress rule to allow ICMP traffic to the customer's on-premises network.
- C. Modify the security list associated with the VCN subnet in which the instance resides. Add a stateful ingress rule to allow ICMP traffic from anywhere.
- D. Modify the route table associated with the VCN subnet in which the instance resides. Add a route to the customer's on-premises network viathe Dynamic Routing Gateway (DRG).
Answer: B,D
NEW QUESTION # 55
Which two Oracle Cloud Infrastructure services use a Dynamic Routing Gateway?
- A. OCI IPSec VPN Connect
- B. Local Peering
- C. OCI FastConnect Private Peering
- D. OCI FastConnect Public Peering
- E. Internet Gateway
Answer: A,C
Explanation:
You can think of a DRG as a virtual router that provides a path for private traffic (that is, traffic that uses private IPv4 addresses) between your VCN and networks outside the VCN's region.
You use a DRG when connecting your existing on-premises network to your virtual cloud network (VCN) with one (or both) of these:
IPSec VPN
Oracle Cloud Infrastructure FastConnect (Private Only)
You also use a DRG when peering a VCN with a VCN in a different region:
Remote VCN Peering (Across Regions)
NEW QUESTION # 56
You have been tasked with creating one virtual cloud network (VCN) each for two line of business (LOB) applications. LOB A and LOB B will need to communicate with each other. To ensure that you can utilize VCN peering, which network CIDR ranges should be used?
- A. VCN A (172.16.0.0/24) and VCN B (172.16.0.0/28)
- B. VCN A (10.0.0.0/16) and VCN B (10.1.0.0/16)
- C. VCN A (10.0.2.0/16) and VCN B (10.0.2.0/25)
- D. VCN A (10.0.0.0/16) and VCN B (10.0.16.0/24)
Answer: B
Explanation:
Explanation
VCN A (10.0.0.0/16) will use a range of IPS from .255.255 and VCN B (10.1.0.0/16) will use a range of IPS from 10.1.0.0 to 10.1.255.255 so will not be any Overlap between 2VCNs
NEW QUESTION # 57
Your company has decided to move a few applications to Oracle Cloud Infrastructure and you havebeen asked to design it for Disaster Recovery (DR). One of the items of your design is to deploy the DR at least 300 miles from the home site and minimize the network latency as much as possible.
Based on that, what will be the recommended deployment?
- A. Deploy applications in different regions and have them connected using VCN Remote Peering
- B. Deploy applications in two separated VCNs in different Availability Domains and use VCN Remote Peering
- C. Deploy applications on the same region splitting workloads across Availability Domains.
- D. Deploy applications in two separated VCNs in different regions and use VCN Local Peering
Answer: A
NEW QUESTION # 58
Which are the TWO tools you would use for Logical migration?
- A. GoldenGate
- B. Data Guard
- C. RMAN
- D. Data Pump
Answer: A,D
NEW QUESTION # 59
Your company is developing a newdatabase application in Oracle Cloud Infrastructure. You need to test application functionality including a hardware failure scenario. Since the application is still in the development phase, you want to minimize infrastructure costs.
Which database service deployment option meets this requirement?
- A. two node real application cluster (RAC) system
- B. two node bare metal system with data guard enabled
- C. Autonomous Data Warehouse (ADW) system as it provides auto fail over functionality
- D. single node baremetal system
Answer: A
NEW QUESTION # 60
Which two statements are true regarding cloning a block volume?
- A. You can skip block volume encryption when creating a clone
- B. You can clone block volumes across regions
- C. You can change the block volume size when creating a clone
- D. You can change the block volume performance when creating a clone
Answer: C,D
Explanation:
Explanation
Youcan create a clone from a volume using the Block Volume service. Cloning enables you to make a copy of an existing block volume without needing to go through the backup and restore process.
A cloned volume is a point-in-time direct disk-to-disk deep copyof the source volume, so all the data that is in the source volume when the clone is created is copied to the clone volume.
You can only create a clone for a volume within the same region, availability domain and tenant. You can create a clone for a volumebetween compartments as long as you have the required access permissions for the operation.
during create a clone you can do the following
If you want to clone the block volume to a larger size volume, check Custom Block Volume Size (GB) and then specifythe new size. You can only increase the size of the volume, you cannot decrease the size. If you clone the block volume to a larger size volume, you need to extend the volume's partition. See Extending the Partition for a Block Volume for more information.
If you want to change the elastic performance setting when cloning the volume, check Custom Block Volume Performance and select the elastic performance setting you want the volume clone to use. See Block Volume Elastic Performance for more information. You can also change the elastic performance setting after you have cloned the volume, see Block Volume Elastic Performance. If you leave Custom Block Volume Performance unchecked, the cloned volume will use the same elastic performance setting as the source volume.
NEW QUESTION # 61
Which two options are available when setting up DNS for your bare metal and virtual machine DB Systems?
(Choosetwo.)
- A. Internet and custom resolver
- B. Google DNS servers
- C. Internet and virtual cloud network (VCN) resolver
- D. custom resolver
Answer: C,D
NEW QUESTION # 62
Which three must be configured for a load balancer to accept incoming traffic? (Choose two.)
- A. a listener
- B. a certificate
- C. a back-end server
- D. a back end set
- E. a security list that is open on a listener port
Answer: A,C,D
Explanation:
https://docs.cloud.oracle.com/iaas/Content/Balance/Tasks/managingloadbalancer.htm?tocpath=Services%7CLoad%20Balancing%7C_____5 The essential components for load balancing include: * A load balancer with pre-provisioned bandwidth. * A backend set with a health check policy. See Managing Backend Sets. * Backend servers for your backend set. See Managing Backend Servers. * One or more listeners . See Managing Load Balancer Listeners. * Load balancer subnet security rules to allow the intended traffic. To learn more about these rules, see Security Rules. * Optionally, you can associate your listeners with SSL server certificate bundles to manage how your system handles SSL traffic. See Managing SSL Certificates.
NEW QUESTION # 63
Which two parameters are required in a back end set's HTTP health check? (Choose two.)
- A. URL path
- B. status code
- C. response body
- D. timeout
- E. port
Answer: A,E
Explanation:
https://docs.cloud.oracle.com/iaas/Content/GSG/Tasks/loadbalancing.htm#Create Enter the Health Check details.
Load Balancing automatically checks the health of the instances for your load balancer. If it detects an unhealthy instance, it stops sending traffic to the instance and reroutes traffic to healthy instances. In this step, you provide the information required to check the health of servers in the backend set and ensure that they can receive data traffic.
Protocol: Select HTTP. Port: Enter 80 URL Path (URI): Enter / The rest of the fields are optional and can be left blank for this tutorial.
Click Create.
NEW QUESTION # 64
Which two statements are true when Oracle Data Guard is configured (usingthe Console) between two Virtual Machine DB Systems deployed in Oracle Cloud Infrastructure? (Choose two.)
- A. Primary is a 1-node RAC DB system and Standby is a 2-node RAC DB system.
- B. Primary is a 2-node RAC DB system and Standby is a 1-node RAC DB system.
- C. Primary is a 1-node RAC DB system and Standby is a 1-node RAC DB system.
- D. Primary is a Bare Metal DB system and Standby is a 1-node RAC DB system.
- E. Primary is a 2-node RAC DB system and Standby is a 2-node RAC DB system.
Answer: A,C
Explanation:
Reference:https://docs.cloud.oracle.com/en-us/iaas/Content/Database/Concepts/overview.htm
NEW QUESTION # 65
You need to set up instance principals so that an application running on an instance can call Oracle Cloud Infrastructure (OCI) public services, without the need to configure user credentials.
A developer in your team has already configured the application built using an OCI SDK to authenticate using the instance principals provider.
Which is NOT a necessary step to complete this set up?
- A. Create apolicy granting permissions to the dynamic group to access services in your compartment or tenancy.
- B. Create a dynamic group with matching rules to specify which instances you want to allow to make API calls against services.
- C. Generate Auth Tokens to enable instances in the dynamic group to authenticate with APIs.
- D. Deploy the application and the SDK to all the instances that belong to the dynamic group.
Answer: D
Explanation:
Reference:https://blogs.oracle.com/cloud-infrastructure/announcing-instance-principals-for-identity-andaccess-m
NEW QUESTION # 66
Which two statements are true about data guard service on DB Systems in Oracle Cloud Infrastructure (OCI)?
(Choose two.)
- A. Data guard configuration on the OCI is limited to one standby database per primary database
- B. Data guard configuration on the OCI is limited to a virtual machine only
- C. Data guard implementation requires two DB Systems, one containing the primary database and one containing the standby database
- D. Data guard implementation requires two DB Systems, one running the primary database on a virtual machine and the standby database running on bare metal
Answer: A,C
NEW QUESTION # 67
......
100% Free 1z0-1072-22 Daily Practice Exam With 256 Questions: https://actualtests.crampdf.com/1z0-1072-22-exam-prep-dumps.html