1Z0-1072-20 Exam Dumps Pass with Updated Feb-2022 Tests Dumps
1Z0-1072-20 exam questions for practice in 2022 Updated 240 Questions
Oracle 1Z0-1072-20 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
NEW QUESTION 71
As the Cloud Architect for your company, you have been tasked with designing a high performance (HPC) cluster in Oracle Cloud Infrastructure (OCI). The following requirements have been defined:
The cluster must be a minimum of three nodes, but may increase to six nodes when demand requires.
The cluster must be resilient to any potential infrastructure failures.
To minimize latency, all nodes must be deployed within the same availability domain (AD).
Adding or replacing nodes within the cluster should take no more than 30 minutes.
Which two steps should be performed to satisfy these requirements in OCI? (Choose two.)
- A. Deploy the cluster in a single AD. Place each of the nodes in one of the three different fault domains in that AD.
- B. Deploy the cluster in a single AD. Place each of the nodes in a different virtual cloud network (VCN) subnet.
- C. Create a backup of your HPC node compute instance boot volume. Launch new compute instances directly from the backup reduce provisioning time.
- D. Create a custom image of your HPC node compute instance. Launch new compute instances using this image to reduce provisioning time.
- E. Deploy the cluster in a single AD with a shared file system that leverages the file storage service (FSS). Deploy a standby cluster in another AD and configure it to use the same shared file system.
Answer: A,D
Explanation:
A fault domain is a grouping of hardware and infrastructure within an availability domain. Each availability domain contains three fault domains. Fault domains provide anti-affinity: they let you distribute your instances so that the instances are not on the same physical hardware within a single availability domain. A hardware failure or Compute hardware maintenance event that affects one fault domain does not affect instances in other fault domains. In addition, the physical hardware in a fault domain has independent and redundant power supplies, which prevents a failure in the power supply hardware within one fault domain from affecting other fault domains.
To control the placement of your compute instances, bare metal DB system instances, or virtual machine DB system instances, you can optionally specify the fault domain for a new instance or instance pool at launch time. If you don't specify the fault domain, the system selects one for you. Oracle Cloud Infrastructure makes a best-effort anti-affinity placement across different fault domains, while optimizing for available capacity in the availability domain. To change the fault domain for an instance, terminate it and launch a new instance in the preferred fault domain.
Use fault domains to do the following things:
Protect against unexpected hardware failures or power supply failures.
Protect against planned outages because of Compute hardware maintenance.
NEW QUESTION 72
You have hired a new employee to run reports from the Autonomous Data Warehouse (ADW) and are not confident in their SQL writing ability.
Into which consumer group will you assign this individual to minimize the impact of their code?
- A. Highest
- B. Low
- C. Lowest
- D. High
- E. Medium
Answer: B
Explanation:
Explanation
in ADW, The tnsnames.ora file provided with the credentials zip file contains three database service names identifiable as high, medium, and low. The predefined service names provide different levels of performance and concurrency for Autonomous Data Warehouse.
high: The High database service provides the highest level of resources to each SQL statement resulting in the highest performance, but supports the fewest number of concurrent SQL statements. Any SQL statement in this service can use all the CPU and IO resources in your database. The number of concurrent SQL statements that can be run in this service is 3, this number is independent of the number of OCPUs in your database.
medium: The Medium database service provides a lower level of resources to each SQL statement potentially resulting a lower level of performance, but supports more concurrent SQL statements. Any SQL statement in this service can use multiple CPU and IO resources in your database. The number of concurrent SQL statements that can be run in this service depends on the number of OCPUs in your database.
low: The Low database service provides the least level of resources to each SQL statement, but supports the most number of concurrent SQL statements. Any SQL statement in this service can use a single CPU and multiple IO resources in your database. The number of concurrent SQL statements that can be run in this service can be up to 300 times the number of OCPUs.
The predefined service names provide different levels of performance and concurrency for Autonomous DB Choose whichever database service offers the best balance of performance and concurrency.
Use the low database service name. to minimize the impact of their SQLs to by low consumer group
NEW QUESTION 73
Which two statements about file storage service (FSS) are accurate? (Choose two.)
- A. Identity and Access Management (IAM) controls which file systems are mountable by which instances
- B. Security lists can be used as a virtual firewall to prevent an instance from mounting an FSS mount target within the same subnet
- C. Encryption of file system in FSS is optional
- D. FSS leverages UNIX user group and permission checking for file access security
- E. Data in transit to an FSS mount target is encrypted
Answer: D,E
Explanation:
All data is encrypted at rest. and In-transit encryption provides a way to secure your data between instances and mounted file systems using TLS v. 1.2 (Transport Layer Security) encryption.
File Storage service supports the AUTH_UNIX style of authentication and permission checking for remote NFS client requests.
NEW QUESTION 74
Which statement is true about restoring a block volume from a manual or policy-based block volume backup?
- A. It can be restored as new volumes to any Availability Domain within the same region.
- B. It can be restored as new volumes to any Availability Domain across different regions.
- C. It must be restored as new volumes to the same Availability Domain on which the original block volume backup resides.
- D. It can be restored as new volumes with different sizes from the backups.
Answer: A
Explanation:
References:
NEW QUESTION 75
You created a public subnet and an internet gateway in your virtual cloud network (VCN) of Oracle Cloud Infrastructure. The public subnet has an associated route table and security list. However, after creating several compute instances in the public subnet, none can reach the Internet.
Which two are possible reasons for the connectivity issue? (Choose two.)
- A. The route table has no default route for routing traffic to the internet gateway.
- B. There is no stateful ingress rule in the security list associated with the public subnet.
- C. A NAT gateway is needed to enable the communication flow to internet.
- D. There is no stateful egress rule in the security list associated with the public subnet.
- E. There is no dynamic routing gateway (DRG) associated with the VCN.
Answer: A,D
Explanation:
An internet gateway as an optional virtual router that connects the edge of the VCN with the internet. To use the gateway, the hosts on both ends of the connection must have public IP addresses for routing. Connections that originate in your VCN and are destined for a public IP address (either inside or outside the VCN) go through the internet gateway. Connections that originate outside the VCN and are destined for a public IP address inside the VCN go through the internet gateway.
Working with Internet Gateways
You create an internet gateway in the context of a specific VCN. In other words, the internet gateway is automatically attached to a VCN. However, you can disable and re-enable the internet gateway at any time. Compare this with a dynamic routing gateway (DRG), which you create as a standalone object that you then attach to a particular VCN. DRGs use a different model because they're intended to be modular building blocks for privately connecting VCNs to your on-premises network.
For traffic to flow between a subnet and an internet gateway, you must create a route rule accordingly in the subnet's route table (for example, destination CIDR = 0.0.0.0/0 and target = internet gateway). If the internet gateway is disabled, that means no traffic will flow to or from the internet even if there's a route rule that enables that traffic. For more information, see Route Tables.
For the purposes of access control, you must specify the compartment where you want the internet gateway to reside. If you're not sure which compartment to use, put the internet gateway in the same compartment as the cloud network. For more information, see Access Control.
You may optionally assign a friendly name to the internet gateway. It doesn't have to be unique, and you can change it later. Oracle automatically assigns the internet gateway a unique identifier called an Oracle Cloud ID (OCID). For more information, see Resource Identifiers.
To delete an internet gateway, it does not have to be disabled, but there must not be a route table that lists it as a target.
AS per compute instances can connect to the Internet so you use egress no ingress
NEW QUESTION 76
You have a shared file system between two web servers using File Storage Service (FSS) and you were tasked to create a backup plan for this environment to protect the data placed into the shared file system.
What is the recommended approach to create this backup using FSS features?
- A. Compress the data that is in the shared volume and copy it into a different folder on the boot volume disk.
- B. Implement a backup policy to copy data from the shared volume to object storage.
- C. Use the rsync tool to send data from the shared volume to a block volume.
- D. Use the rsync tool to send data from the shared volume to a boot volume disk.
- E. Implement a backup policy to execute a snapshot of the shared volume.
Answer: E
NEW QUESTION 77
Which three are valid Terraform configuration components? (Choose three.)
- A. data source
- B. variable
- C. region
- D. metadata
- E. resource
- F. instance
Answer: A,B,E
NEW QUESTION 78
Your customer is using an Oracle Cloud Infrastructure (OCI) compartment named Production that hosts several resources such as compute instances, DB Systems and File Systems. Each resource in the Production compartment is tagged.
The customer's security team wants to restrict access to DB Systems to only the authorized group of DBAs.
Which OCI Tagging capability can be used to meet this requirement?
- A. Cost-Tracking Tags
- B. Tag-based Access Control
- C. Tags Defaults with predefined values
- D. Tag Defaults
Answer: B
Explanation:
Reference:
https://docs.cloud.oracle.com/en-us/iaas/Content/Tagging/Tasks/
managingaccesswithtags.htm#about
NEW QUESTION 79
A customer has established an Oracle Cloud Infrastructure (OCI) FastConnect connection to OCI. The virtual circuit is up and routes are being advertised from the customer's end, however the customer is unable to ping from compute instances inside the virtual cloud network (VCN) to servers residing in its on-premises data center.
Which two options on OCI would remedy this situation? (Choose two.)
- A. Modify the route table associated with the VCN subnet in which the instance resides. Add a route to the customer's on-premises network via the Dynamic Routing Gateway (DRG).
- B. Modify the default VCN route table to add a route back to the customer's on-premises network via the DRG.
- C. Modify the security list associated with the VCN subnet in which the instance resides. Add a stateful ingress rule to allow ICMP traffic from anywhere.
- D. Modify the security list associated with the VCN subnet in which the instance resides. Add a stateful egress rule to allow ICMP traffic to the customer's on-premises network.
Answer: A,D
NEW QUESTION 80
Your company has decided to move a few applications to Oracle Cloud and you have been asked to design it for both High Availability (HA) and Disaster Recovery (DR).
Which two should you consider while designing your Oracle Cloud Infrastructure architecture? (Choose two.)
- A. Compartments
- B. Instance Shape
- C. Availability Domain
- D. Region
Answer: C,D
Explanation:
Explanation
References:
https://blogs.oracle.com/cloud-infrastructure/migration-and-disaster-recovery-in-the-oracle-cloud-with-rackware
NEW QUESTION 81
You have deployed a compute instance (VM.Standard2.24) to run an Oracle database. With this set up, you run into some performance issues and want to leverage an OCI Dense IO shape (VM.DenseIO2.24), with which you get 25.6 TB local NVMe SSD. You do not want to lose the configuration changes you made to the instance. Which of the following TWO steps ARE NOT required to make this transition?
- A. Terminate the VM.Standard2.24 instance and preserve the boot volume
- B. Create a new instance using a VM.DenseIO2.24 shape using the preserved boot volume and move the Oracle Database data to block volumes
- C. Terminate the VM.Standard2.24 instance and do not preserve the boot volume
- D. Create a new instance using the VM.Dense102.24 shape using the preserved boot volume and move the Oracle Database data to NVMe disks
Answer: B,C
Explanation:
You can permanently terminate (delete) instances that you no longer need. Any attached VNICs and volumes are automatically detached when the instance terminates. Eventually, the instance's public and private IP addresses are released and become available for other instances. By default, the instance's boot volume is deleted when you terminate the instance, however you can preserve the boot volume associated with the instance, so that you can attach it to a different instance as a data volume, or use it to launch a new instance.
Dense I/O Shapes Designed for large databases, big data workloads, and applications that require high-performance local storage. DenseIO shapes include locally-attached NVMe-based SSDs.
so once you create the VM.DenseIO you need to moce the Database to locally-attached NVMe-based SSDs
NEW QUESTION 82
You have provisioned an Autonomous Data Warehouse (ADW) database with 16 enabled OCPUs and need to configure the consumer group for your application.
Which two are true when deciding the number of sessions for each application? (Choose two.)
- A. The HIGH consumer group can run up to 16 concurrent SQL statements as long as MEDIUM and LOW consumer groups have 0 SQL statements
- B. The HIGH consumer group can run 3 concurrent SQL statements when MEDIUM consumer group has
0 SQL statements - C. The MEDIUM and LOW consumer group can run up to 16 concurrent SQL statements if HIGH consumer group has 0 SQL statements
- D. The MEDIUM consumer group can run 20 concurrent SQL statements when HIGH consumer group has
0 SQL statements - E. The HIGH consumer group can run up to 16 concurrent SQL statements in addition to 32 concurrent SQL statements in MEDIUM and LOW consumer group each
Answer: B,D
Explanation:
Explanation
References:
https://docs.oracle.com/en/cloud/paas/autonomous-data-warehouse-cloud/user/connect-predefined.html#GUID-9
NEW QUESTION 83
Which two are a valid image source when launching a new compute instance? (Choose two.)
- A. boot volume
- B. bare metal instance
- C. custom image
- D. object storage
Answer: A,C
Explanation:
Explanation
https://docs.cloud.oracle.com/en-us/iaas/Content/Resources/Assets/whitepapers/deploying-custom-os-images.pdf A template of a virtual hard drive that determines the operating system and other software for an instance. For details about Oracle Cloud Infrastructure platform images, see Oracle-Provided Images. You can also launch instances from:
Trusted third-party images published by Oracle partners from the Partner Image catalog. For more information about partner images, see Overview of Marketplace and Working with Listings.
Pre-built Oracle enterprise images and solutions enabled for Oracle Cloud Infrastructure Custom images, including bring your own image scenarios.
Boot Volumes.
Bottom of Form
NEW QUESTION 84
Which two statements are true about an Oracle Cloud Infrastructure (OCI) virtual cloud network (VCN)?
(Choose two.)
- A. If you own a block of public IPs, you can assign it to one of your VCNs.
- B. In regions with multiple Availability Domains (AD), each AD should have their own VCN assigned to it.
- C. To delete a VCN, its subnets must contain no resources.
- D. A VCN covers a single, contiguous IPv4 CIDR block of your choice.
- E. A VCN can have multiple CIDR blocks associated with it.
Answer: C,D
Explanation:
Reference:
https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/managingVCNs.htm
NEW QUESTION 85
Which storage service is used on OCI for a Data Transfer Service job?
- A. Block Volume
- B. An instance with enough storage to accommodate the job
- C. A File System service instance
- D. An object bucket
Answer: D
Explanation:
Explanation
https://docs.cloud.oracle.com/en-us/iaas/Content/DataTransfer/Concepts/overview.htm
NEW QUESTION 86
You have two line of business operations (LOB1, LOB2) leveraging Oracle Cloud Infrastructure. LOB1 is deployed in VCN1 in the OCI US East region, while LOB2 is deployed in VCN2 in the US West region. You need to peer VCN1 and VCN2 for disaster recovery and data backup purposes. To ensure you can utilize the OCI Virtual Cloud Network remote peering feature, which CIDR ranges should be used?
- A. VCN1 (192.168.0.0/16) and VCN2 (192.168.1.0/27)
- B. VCN1 (172.16.1.0/24) and VCN2 (172.16.1.0/27)
- C. VCN1 (10.0.0.0/16) and VCN2 (10.0.1.0/24)
- D. VCN1 (10.0.0.0/16) and VCN2 (172.16.0.0/16)
Answer: D
Explanation:
Explanation
VCN1 (10.0.0.0/16) will use the IP Range from 10.0.0.0 to 10.0.255.255 and the VNC 2 (172.16.0.0/16) will use the IP Range from 172.16.0.0 to 172.16.255.255 the will not be overlap between the 2 VCN
NEW QUESTION 87
Which option is NOT a valid action within the Oracle Cloud Infrastructure (OCI) Block Volume service?
- A. Restore from a volume backup to a larger volume.
- B. Clone an existing volume to a new, larger volume.
- C. Shrink an existing volume in place with offline resizing.
- D. Expand an existing volume in place with offline resizing.
Answer: C
NEW QUESTION 88
Which two statements are true about data guard service on DB Systems in Oracle Cloud Infrastructure (OCI)?
(Choose two.)
- A. Data guard implementation requires two DB Systems, one containing the primary database and one containing the standby database
- B. Data guard implementation requires two DB Systems, one running the primary database on a virtual machine and the standby database running on bare metal
- C. Data guard configuration on the OCI is limited to one standby database per primary database
- D. Data guard configuration on the OCI is limited to a virtual machine only
Answer: A,C
NEW QUESTION 89
You have been notified of an application failure indicating that one or more of the Oracle Cloud Infrastructure (OCI) resources have become unavailable. After scanning the Compute and Database consoles, you notice that one of the DB Systems is missing.
What would you do to identify the reason for this missing resource?
- A. Create a serial console connection to the DB System that does not appear in the management console. Connect to the serial console connection, and then review the system logs under /var/log/messages.
- B. View the service limits associated with your account to ensure that you have not exceeded the allowable number of DB Systems in your tenancy.
- C. Navigate to the Audit console and search the previous 24 hours for all DELETE request actions to get a list of any resource that was deleted in the past 24 hours.
- D. Navigate to the Audit console and search the previous 24 hours for all the GET request actions to get a list of every event that occurred in the past 24 hours.
Answer: C
Explanation:
You can filter results by request actions to zero in on only the events with operations that interest you. For example, say that you only want to know about instances that were deleted during a specific time frame. Select a delete request action filter to see only the events with delete operations Reference:
https://docs.cloud.oracle.com/en-us/iaas/Content/GSG/Tasks/usingaudit.htm
NEW QUESTION 90
You are a network architect and have designed the network infrastructure of a three-tier application on Oracle Cloud Infrastructure (OCI). In the architecture, back-end DB servers are in a private subnet. One of your DB administrators requests to have access to OCI object storage service.
How can you meet this requirement?
- A. Create a service gateway, add a new route rule to the private subnet route table that uses object storage as target type.
- B. Attach a public IP address to the instances in the private subnet, and then add a new route rule to the private subnet route table to route default traffic to the internet gateway.
- C. Create a dynamic routing gateway (DRG) and attach it to your virtual cloud network (VCN). Add a default route rule to the private subnets route table and set the target as DRG.
- D. Add a new route rule to the private subnet route table to route default traffic to the internet gateway.
Answer: A
Explanation:
A service gateway lets resources in your VCN privately access specific Oracle services, without exposing the data to an internet gateway or NAT. The resources in the VCN can be in a private subnet and use only private IP addresses. The traffic from the VCN to the service of interest travels over the Oracle network fabric and never traverses the internet.
To give your VCN access to a given service CIDR label, you must enable that service CIDR label for the VCN's service gateway. You can do that when you create the service gateway, or later after it's created. You can also disable a service CIDR label for the service gateway at any time.
For traffic to be routed from a subnet in your VCN to a service gateway, you must add a rule accordingly to the subnet's route table. The rule must use the service gateway as the target.
Reference:
https://blogs.oracle.com/cloud-infrastructure/connect-private-instances-with-oracle-servicesthrough-an-oracle-cloud-infrastructure-service-gateway
NEW QUESTION 91
Which two statements are true about Oracle Cloud Infrastructure IPSec VPN Connect?
- A. OCI IPSec VPN can be configured in tunnel mode only
- B. Each OCI IPSec VPN consists of multiple redundant IPSec tunnels
- C. OCI IPSec VPN tunnel supports only static routes to route traffic
- D. OCI IPSec VPN can be configured in trans port mode only
Answer: A,B
Explanation:
Explanation
VPN Connect provides a site-to-site IPSec VPN between your on-premises network and your virtual cloud network (VCN). The IPSec protocol suite encrypts IP traffic before the packets are transferred from the source to the destination and decrypts the traffic when it arrives.
On general, IPSec can be configured in the following modes:
Transport mode: IPSec encrypts and authenticates only the actual payload of the packet, and the header information stays intact.
Tunnel mode (supported by Oracle): IPSec encrypts and authenticates the entire packet. After encryption, the packet is then encapsulated to form a new IP packet that has different header information.
Oracle Cloud Infrastructure supports only the tunnel mode for IPSec VPNs.
Each Oracle IPSec VPN consists of multiple redundant IPSec tunnels. For a given tunnel, you can use either Border Gateway Protocol (BGP) dynamic routing or static routing to route that tunnel's traffic. More details about routing follow.
IPSec VPN site-to-site tunnels offer the following advantages:
Public internet lines are used to transmit data, so dedicated, expensive lease lines from one site to another aren't necessary.
The internal IP addresses of the participating networks and nodes are hidden from external users.
The entire communication between the source and destination sites is encrypted, significantly lowering the chances of information theft.
NEW QUESTION 92
You are about to deploy an e-business application on Oracle Cloud Infrastructure and one of the requirements is to use a shared file system that supports the NFS protocol.
Which storage service would meet this requirement?
- A. block volume
- B. data transfer appliance
- C. file storage
- D. object storage
Answer: C
Explanation:
Explanation
Use the File Storage service when your application or workload includes big data and analytics, media processing, or content management, and you require Portable Operating System Interface (POSIX)-compliant file system access semantics and concurrently accessible storage. The File Storage service is designed to meet the needs of applications and users that need an enterprise file system across a wide range of use cases, including the following:
General Purpose File Storage: Access to an unlimited pool of file systems to manage growth of structured and unstructured data.
Big Data and Analytics: Run analytic workloads and use shared file systems to store persistent data.
Lift and Shift of Enterprise Applications: Migrate existing Oracle applications that need NFS storage, such as Oracle E-Business Suite and PeopleSoft.
Databases and Transactional Applications: Run test and development workloads with Oracle, MySQL, or other databases.
Backups, Business Continuity, and Disaster Recovery: Host a secondary copy of relevant file systems from on premises to the cloud for backup and disaster recovery purposes.
MicroServices and Docker: Deliver stateful persistence for containers. Easily scale as your container-based environments grow.
NEW QUESTION 93
Which of the following statement is true regarding Oracle Cloud Infrastructure Object Storage Pre-Authenticated Requests?
- A. Changing the bucket visibility does not change existing pre-authenticated requests
- B. Pre-authenticated requests don't have an expiration
- C. It is not possible to create pre-authenticated requests for the buckets, but only for the objects
- D. It Is not possible to create pre-authenticated requests for "archive" storage tier
Answer: A
Explanation:
Pre-authenticated requests provide a way to let users access a bucket or an object without having their own credentials, as long as the request creator has permissions to access those objects. For example, you can create a request that lets an operations support user upload backups to a bucket without owning API keys. Or, you can create a request that lets a business partner update shared data in a bucket without owning API keys.
When you create a pre-authenticated request, a unique URL is generated. Anyone you provide this URL to can access the Object Storage resources identified in the pre-authenticated request, using standard HTTP tools like curl and wget.
Understand the following scope and constraints regarding pre-authenticated requests:
Users can't list bucket contents.
You can create an unlimited number of pre-authenticated requests.
There is no time limit to the expiration date that you can set.
You can't edit a pre-authenticated request. If you want to change user access options in response to changing requirements, you must create a new pre-authenticated request.
The target and actions for a pre-authenticated request are based on the creator's permissions. The request is not, however, bound to the creator's account login credentials. If the creator's login credentials change, a pre-authenticated request is not affected.
You cannot delete a bucket that has a pre-authenticated request associated with that bucket or with an object in that bucket.
Understand the following scope and constraints regarding public access:
Changing the type of access is bi-directional. You can change a bucket's access from public to private or from private to public.
Changing the type of access doesn't affect existing pre-authenticated requests. Existing pre-authenticated requests still work.
NEW QUESTION 94
......
Authentic 1Z0-1072-20 Dumps With 100% Passing Rate Practice Tests Dumps: https://www.prep4king.com/1Z0-1072-20-exam-prep-material.html
