100% Free Real Updated 1z0-1072-22 Questions & Answers Pass Your Exam Easily
Easily To Pass New 1z0-1072-22 Verified & Correct Answers
NEW QUESTION # 104
You need to create a high performance shared file system, and have been advised to use file storage service (FSS). You have logged into the Oracle Cloud Infrastructure console, created a file system, and followed the steps to mount the shared file system on your Linux instance. However, you are still unable to access the shared file system from your Linux instance.
What is the likely reason for this?
- A. There is no route in your virtual cloud network's (VCN) route table for mount target traffic
- B. There is no internet gateway (IGW) set up for mount target traffic
- C. There are no security list rules for mount target traffic
- D. There is no Identity and Access Management (IAM) policies set up to allow you to access the mount target
Answer: C
Explanation:
Virtual firewall rules for your VCN. Your VCN comes with a default security list, and you can add more. These security lists provide ingress and egress rules that specify the types of traffic allowed in and out of the instances. You can choose whether a given rule is stateful or stateless. Security list rules must be set up so that clients can connect to file system mount targets. For more information about how security lists work in Oracle Cloud Infrastructure, see Security Lists in the Networking documentation. For information about setting up specific security list rules required for mount target traffic, see Configuring VCN Security List Rules for File Storage. About Security explains how security lists interact with other types of security in your file system.
https://docs.cloud.oracle.com/iaas/Content/File/Concepts/filestorageoverview.htm
NEW QUESTION # 105
You have created a virtual cloudnetwork (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains a DB System. The application requires a shared file system so you have provisioned one using the file storage service (FSS). You also created the corresponding mount target in one of the application subnets. The VCN security lists are properly configured so that both application servers and the DB System can access the file system. The security team determines that the DB System should haveread-only access to the file system.
What change would you make to satisfy this requirement?
- A. Connect via SSH to one of the application servers where the file system has been mounted. Use the Unix command chmod to change permissions on the file system directory, allowing the database user read only access.
- B. Create an instance principal for the DB System. Write an Identity and Access Management (IAM) policy that allows the instance principal read-only access to the filestorage service.
- C. Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet.
- D. Modify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateless.
Answer: C
Explanation:
Explanation
NFS export options enable you to create more granular access control than is possible using just security list rules to limit VCN access. You can use NFS export options to specify access levels for IP addresses or CIDR blocks connecting to file systems through exports in a mount target.
NEW QUESTION # 106
Which three are default Virtual Cloud Network (VCN) components? (Choose three.)
- A. Dynamic Routing Gateway
- B. DHCP options
- C. Route Table
- D. Security List
- E. Internet Gateway
Answer: B,C,D
Explanation:
Reference:
(1) => Populated by Default (0) => Not Populated by Default
Resources ========== Subnets (0) Route Tables (1) Internet Gateways (0) Dynamic Routing Gateways (0) Network Security Groups (0) Security Lists (1) DHCP Options (1) Local Peering Gateways (0) NAT Gateways (0) Service Gateways (0)
NEW QUESTION # 107
Your company uses the Oracle Cloud Infrastructure (OCI) Object Storage service to share large data sets with its data science team. The data science team consists of 20 peoplewho work from offices in Washington, D.C., and Tokyo. While working in these offices, employees are assigned an IP address from the public IP range
129.146.31.0/27
Which two steps should you take to ensure that the Object Storage bucket used in this scenario was only accessible from these office locations? (Choose two.)
- A. Write an IAM policy that includes the conditional statementwhere request.networkSource.name
=CorpNet - B. Write an IAM policy that includes the conditional statementwhere request.region =
129.146.31.0/27 - C. Create a Network Source named CorpNetwork with a CIDR block of129.146.31.0/27
- D. Set the bucket visibility to public and only share the URL with the data scienceteam via email
- E. Create a pre-authenticated request for each data set and only share with the data science team via email
- F. Create a Network Source named CorpNetwork witha CIDR block of129.146.0.0/16
Answer: E,F
NEW QUESTION # 108
You are asked to create a user that will access programmatic endpoints in Oracle Cloud Infrastructure. The user must not be allowed to authenticate by username and password.
Which two authentication options can you use? (Choose two.)
- A. Auth tokens
- B. API signing key
- C. SSH key pair
- D. PEM Certificate file
- E. Windows password
Answer: A,B
NEW QUESTION # 109
Which storage would you use if your big data workload requires shared access and an NFS based interface?
- A. Archive Storage
- B. Storage Software Cloud Appliance
- C. Block Volume
- D. Object Storage
- E. File Storage
Answer: E
Explanation:
Explanation
References:https://docs.cloud.oracle.com/iaas/Content/File/Concepts/filestorageoverview.htm The File Storage service is designed to meet the needs of applications and users that need an enterprise file system across a widerange of use cases, including the following:
General Purpose File Storage: Access to an unlimited pool of file systems to manage growth of structured and unstructured data.
Big Data and Analytics: Run analytic workloads and use shared file systems to storepersistent data.
Lift and Shift of Enterprise Applications: Migrate existing Oracle applications that need NFS storage, such as Oracle E-Business Suite and PeopleSoft.
Databases and Transactional Applications: Run test and development workloads with Oracle, MySQL, or other databases.
Backups, Business Continuity, and Disaster Recovery: Host a secondary copy of relevant file systems from on premises to the cloud for backup and disaster recovery purposes.
MicroServices and Docker: Deliver stateful persistence for containers. Easily scale as your container-based environments grow.
NEW QUESTION # 110
Which two features are offered natively on Oracle Cloud Infrastructure Database Cloud Service (DBCS)? (Choose two.)
- A. backup to Object Storage
- B. Data Guard in Async mode within a region
- C. Data Guard in Maximum Protection mode
- D. GoldenGate replication between two regions
Answer: A,B
Explanation:
Data Guard in Maximum Performance protection mode is supported not simply Maximum Protection mode, however, you can configure additional protection modes and transport types by logging on to the DB system and accessing Data Guard command-line interface( DGMGRL).
NEW QUESTION # 111
Which is NOT a valid option for an Oracle Cloud Infrastructure (OCI) compute shape?
- A. Virtual Machine
- B. Dedicated Virtual Machine Host
- C. Exadata Virtual Machine
- D. Bare Metal
Answer: C
NEW QUESTION # 112
You have two NFS clients running in two different subnets within the same Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN). You have created a shared file system for the two NFS clients who want to connect to the same file system, but you want to restrict one of the clients to have READ access while the other has READ/Write access. Which OCr feature would you leverage to meet this requirement?
- A. Use VCN security rules to control access for the NFS clients
- B. Use OCI Identity Access Management to control access for the NFS clients
- C. Use File Storage NFS Export Options to control access for the NFS clients
- D. Use NFS security to control access for the NES clients
Answer: C
Explanation:
Oracle Cloud Infrastructure File Storage service provides a durable, scalable, secure, enterprise-grade network file system. You can connect to a File Storage service file system from any bare metal, virtual machine, or container instance in your Virtual Cloud Network (VCN). You can also access a file system from outside the VCN using Oracle Cloud Infrastructure FastConnect and Internet Protocol security (IPSec) virtual private network (VPN).
EXPORT
Exports control how NFS clients access file systems when they connect to a mount target. File systems are exported (made available) through mount targets. Each mount target maintains an export set which contains one or many exports. A file system must have at least one export in one mount target in order for instances to mount the file system. The information used by an export includes the file system OCID, mount target OCID, export set OCID, export path, and client export options. For more information, see Managing Mount Targets.
EXPORT SET
Collection of one or more exports that control what file systems the mount target exports using NFSv3 protocol and how those file systems are found using the NFS mount protocol. Each mount target has an export set. Each file system associated with the mount target has at least one export in the export set.
EXPORT PATH
A path that is specified when an export is created. It uniquely identifies the file system within the mount target, letting you associate up to 100 file systems to a single mount target. This path is unrelated to any path within the file system itself, or the client mount point path.
EXPORT OPTIONS
NFS export options are a set of parameters within the export that specify the level of access granted to NFS clients when they connect to a mount target. An NFS export options entry within an export defines access for a single IP address or CIDR block range. For more information, see Working with NFS Export Options.
NEW QUESTION # 113
Where do you find the tnsnames.ora for your Autonomous Data Warehouse (ADW) database?
- A. You can download tnsnames.ora from Oracle Cloud Infrastructure web console under ADW details page
- B. The tnsnames.ora file is included in credentials.zip file that you download from service console of ADW
- C. You are automatically prompted to download the tnsnames.ora file upon creation of the ADW database
- D. The ADW database will place the tnsnames.ora file in an object storage bucket
Answer: B
Explanation:
https://docs.oracle.com/en/cloud/paas/autonomous-data-warehouse-cloud/user/connect-intorduction.html#GUID-CD4C10A6-1C1E-4969-8F67-1433B6CE626A To download client credentials from the Autonomous Transaction Processing Service Console:
- From the Service Console click the Administration link.
- Click Download Client Credentials (Wallet).
- On the Download Client Credentials (Wallet) page, enter a wallet password in the Password field and confirm the password in the Confirm Password field. The password must be at least 8 characters long and must include at least 1 letter and either 1 numeric character or 1 special character. This password protects the downloaded Client Credentials wallet.
- Click Download to save the client security credentials zip file. By default the filename is: Wallet_databasename.zip. You can save this file as any filename you want. You must protect this file to prevent unauthorized database access.
The zip file includes the following:
tnsnames.ora and sqlnet.ora: Network configuration files storing connect descriptors and SQL*Net client side configuration.
cwallet.sso and ewallet.p12: Auto-open SSO wallet and PKCS12 file. PKCS12 file is protected by the wallet password provided in the UI.
keystore.jks and truststore.jks: Java keystore and truststore files. They are protected by the wallet password provided while downloading the wallet.
ojdbc.properties: Contains the wallet related connection property required for JDBC connection. This should be in the same path as tnsnames.ora.
NEW QUESTION # 114
Your application consists of three Oracle Cloud Infrastructure compute instances running behind a public load balancer. You have configured the load balancer to perform health checks on these instances, but one of the three instances fails to pass the configured health check. Which of the following action will the load balancer perform?
- A. Remove the instance that failed the health check from the backend set
- B. Stop the instances that failed health check
- C. Stop sending traffic to the instance that failed health check
- D. Terminate the instance that failed health check
Answer: C
Explanation:
Explanation
health check A test to confirm the availability of backend servers. A health check can be a request or a connection attempt. Based on a time interval you specify, the load balancer applies the health check policy to continuously monitor backend servers. Ifa server fails the health check, the load balancer takes the server temporarily out of rotation. If the server subsequently passes the health check, the load balancer returns it to the rotation.
You configure your health check policy when you create a backend set. You can configure TCP-level or HTTP-level health checks for your backend servers.
- TCP-level health checks attempt to make a TCP connection with the backend servers and validate the response based on the connection status.
- HTTP-level health checks send requests to the backend servers at a specific URI and validate the response based on the status code or entity data (body) returned.
The service provides application-specific health check capabilities to help you increase availability and reduceyour application maintenance window.
NEW QUESTION # 115
Your application consists of three Oracle Cloud Infrastructure compute instances running behind a public load balancer. You have configured the load balancer to perform health checks on these instances, but one of the three instances fails to pass the configured health check. Which of the following action will the load balancer perform?
- A. Remove the instance that failed the health check from the backend set
- B. Stop the instances that failed health check
- C. Stop sending traffic to the instance that failed health check
- D. Terminate the instance that failed health check
Answer: C
Explanation:
health check A test to confirm the availability of backend servers. A health check can be a request or a connection attempt. Based on a time interval you specify, the load balancer applies the health check policy to continuously monitor backend servers. If a server fails the health check, the load balancer takes the server temporarily out of rotation. If the server subsequently passes the health check, the load balancer returns it to the rotation.
You configure your health check policy when you create a backend set. You can configure TCP-level or HTTP-level health checks for your backend servers.
- TCP-level health checks attempt to make a TCP connection with the backend servers and validate the response based on the connection status.
- HTTP-level health checks send requests to the backend servers at a specific URI and validate the response based on the status code or entity data (body) returned.
The service provides application-specific health check capabilities to help you increase availability and reduce your application maintenance window.
NEW QUESTION # 116
Which two tagging related items are valid attributes that may be included in payload of an audit log event? (Choose two.)
- A. Predefined values
- B. Tag variables
- C. Default tags
- D. Defined tags
- E. Free-form tags
- F. Cost-tracking tags
Answer: D,E
Explanation:
D18912E1457D5D1DDCBD40AB3BF70D5D
NEW QUESTION # 117
When terminating a compute instance, you want to preserve the boot volume and its data.
Which step will you need to perform?
- A. Reboot the instance first, and then terminate the instance.
- B. Before terminating the instance, you must detach the boot volume.
- C. You cannot preserve the boot volume; it will always be deleted when you terminate the instance.
- D. Disable the default option to delete the boot volume when terminating an instance.
Answer: D
Explanation:
Reference:
https://docs.cloud.oracle.com/iaas/Content/Compute/Tasks/terminatinginstance.htm
NEW QUESTION # 118
D18912E1457D5D1DDCBD40AB3BF70D5D
Which two methods are supported for migrating your on-premises Oracle database to an Oracle Autonomous Transaction Processing (ATP) database in Oracle Cloud Infrastructure? (Choose two.)
- A. Use Oracle Data Pump.
- B. Load text files into ATP using SQL Developer.
- C. Transfer the physical database files and re-create the database.
- D. Use database backup and restore.
- E. Use RMAN duplicate.
Answer: A,C
Explanation:
Reference:
BB1C-55F020D4C1CD
NEW QUESTION # 119
You have anexternal facing web server running in the Oracle Cloud Infrastructure (OCI) London region. You are notified that customers in North America and Australia are facing high latency while connecting to your web server.
Which services are available on OCI thatcan help you get current latency statistics to your web server from these markets?
- A. Use DNS Zone Management service to check latency over that connection
- B. Use the Internet Intelligence tool. Run tests using the web server's public IP address and review traceroute details from different vantage points
- C. Setup an IPsec VPN with customers in those markets and check latency over that connection
- D. Setup a FastConnect with customers in those markets and check latency over that connection
Answer: B
Explanation:
Explanation
The second tool, OCI IP Troubleshooting, helps troubleshoot issues with public facing IP addresses.
This feature is also part of our Internet Intelligence toolset, providing analytical insight to help network operations teams reduce the time it takes to troubleshoot an issue by providing awareness of availability and latency across the Internet.
Ref: https://blogs.oracle.
com/cloud-infrastructure/internet-intelligence,-now-available-in-the-oracle-cloud-infrastructure-console
NEW QUESTION # 120
A company currently uses Microsoft Active Directory as its identity provider. The company recently subscribed to Oracle Cloud Infrastructure (OCI) to leverage the cloud platform for test and development. As the administrator, you configured the OCI tenancy to be federated with Microsoft Active Directory. Now you need to give access to developers so that they can start creating resources in their OCI accounts.
Which step will you perform to make sure you are not duplicating user creation inside of OCI tenancy?
- A. Create a group for developers on OCI and map the group to a similar group in Microsoft Active Directory during the federation process.
- B. Create a group for developers on OCI, export all the developers from Microsoft Active Directory, and then import them into the Identity and Access Management (IAM) group.
- C. Create a new user account in OCI for each user, and then create policies to provide access to developers.
- D. Create a single user account in OCI, and then create policies to provide access to developers to this single account.
Answer: A
Explanation:
When working with your IdP, your administrator defines groups and assigns each user to one or more groups according to the type of access the user needs. Oracle Cloud Infrastructure also uses the concept of groups (in conjunction with IAM policies) to define the type of access a user has. As part of setting up the relationship with the IdP, your administrator can map each IdP group to a similarly defined IAM group, so that your company can re-use the IdP group definitions when authorizing user access to Oracle Cloud Infrastructure resources.
NEW QUESTION # 121
Which three methods can you use to manage Oracle Cloud Infrastructure services? (Choose three.)
- A. Oracle Cloud Infrastructure Console
- B. SSH or RDP
- C. Command-line Interface
- D. Oracle Cloud Infrastructure Desktop Client
- E. REST API
Answer: A,C,E
Explanation:
https://docs.cloud.oracle.com/iaas/Content/GSG/Concepts/baremetalintro.htm
NEW QUESTION # 122
......
Free 1z0-1072-22 Exam Files Downloaded Instantly: https://examkiller.itexamreview.com/1z0-1072-22-valid-exam-braindumps.html
