The Best Valid 1z0-1067-24 Dumps for Helping Passing 1z0-1067-24 Exam!
UPDATED Oracle 1z0-1067-24 Exam Questions & Answer
Oracle 1z0-1067-24 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
NEW QUESTION # 47
You run a large global application with 90% of your customers based in the US and Canada. You want to test a new feature and allow a small percentage of users to access the new version of your application. Which Oracle Cloud Infrastructure (OCI) Traffic Management steering policy should you utilize?
- A. Load Balancer
- B. Geolocation steering
- C. ASN steering
- D. IP Prefix steering
Answer: A
NEW QUESTION # 48
When creating an alarm query in Oracle Cloud Infrastructure (OCI) Monitoring, which of the following statement is NOT valid?
- A. You must specify Trigger rule (threshold or absence).
- B. You must specify an interval
- C. You must specify a Metric
- D. You must specify Statistic
- E. You must specify Resource Group
Answer: E
NEW QUESTION # 49
You have a group pf developers who launch multiple VM.Standard2.2 compute instances every day into the compartment Dev. As a result, your OCI tenancy quickly hit the service limit for this shape. Other groups can no longer create new instances using VM.Standard2.2 shape. Because of this, your company has issued a new mandate that the Dev compartment must include a quota to allow for use of only 20 VM.Standard2.2 shapes per Availability Do-main. Your solution should not affect any other compartment in the tenancy. Which quota statement should be used to implement this new requirement? (Choose the best answer.)
- A. zero compute quotas in tenancy set compute quota vm-standard22--count to 20 in tenancy dev
- B. set compute quota vm-standard2-count to 10 in compartment dev where request.region = us-phoenix-01
- C. set compute quota vm-standard22--count to 20 in compartment dev
- D. zero compute quotas in tenancy set compute quota vm-standard22--count to 20 in compartment dev
Answer: C
NEW QUESTION # 50
You have the following compartment structure within your company Oracle Cloud Infrastructure (OCI) tenancy:
You want to create a policy in the root compartment to allow SystemAdmins to manage VCNs only in CompartmentC. Which policy is correct? (Choose the best answer.)
- A. Allow group SystemAdmins to manage virtual-network-family in compartment Root
- B. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentC
- C. Allow group SystemAdmins to manage virtual-network-family in compartment Com-partmentA:CompartmentB:CompartmentC
- D. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentB:CompartmentC
Answer: C
NEW QUESTION # 51
You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively. You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us phoenix-1 region only and not any other OCI regions. What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.)
- A. Allow group PHX-Admins to manage all-resources in tenancy where re-guest.target='us-phoenix-1'
- B. Allow group PHX-Admins to manage all-resources in tenancy where re-guest.region='us-phoenix-1'
- C. Allow group PHX-Admins to manage all-resources in tenancy where re-guest.location='us-phoenix-1'
- D. Allow group PHX-Admins to manage all-resources in tenancy where re-guest.permission= 'us-phoenix-
1'
Answer: B
NEW QUESTION # 52
You are an admin of an OCI tenancy. To save cost, you want to restrict the amount of OCPUs that can be provisioned in each compartment. Which will allow this?
- A. Resource Manager
- B. Budgets
- C. Compartment quotas
- D. Service limits
Answer: C
NEW QUESTION # 53
Security Testing Policy describes when and how you may conduct certain types of security testing of Oracle Cloud Services, including vulnerability and penetration tests, as well as tests involving data scraping tools.
What does Oracle allow as part of this testing? (Choose the best answer.)
- A. Customers can simulate DoS attack scenarios as long as it restricted to the customer own environment.
- B. Customers are allowed to use their own testing and monitoring tools.
- C. Customers can validate that their network resources are isolated from other customer resources.
- D. Customers are allowed to test Oracle Cloud Infrastructure (OCI) hardware related to resources in their tenancy.
Answer: B
NEW QUESTION # 54
You have set an alarm to be generated when the CPU usage of a specified instance is greater than 10%. In the alarm behavior view below you notice that the critical condition happened around 23:30. You were expecting a notification after 1 minute, however, the alarm firing state did not begin until 23:33.
What should you change to fix it? (Choose the best answer.)
- A. Change the alarm metric interval to 1.
- B. Change the alarm trigger delay minutes value to 1.
- C. Change the notification topic that you previously associated with the alarm.
- D. Change the alarm condition to be grater than 3%.
Answer: B
NEW QUESTION # 55
You have a 750 MIB file in an Oracle Cloud Infrastructure (OCI) Object Storage bucket. You want to download the file in multiple parts to speed up the download using the OCI CLI. You also want to configure each part size to be 128 MIB. Which is the correct OCI CLI command for this operation? (Choose the best answer.)
- A. oci os object download -ns my-namespace -bn my-bucket --name my-large-object --multipart- download-threshold 750 --parallel-download-count 128
- B. oci os object download -ns my-namespace -bn my-bucket --name my-large-object --resume-put -- multipart-download-threshold 500 --part-size 128
- C. oci os object get -ns my-namespace -bn my-bucket --name my-large-object --multipart-download- threshold 500 --part-size 128
- D. oci os object get -ns my-namespace -bn my-bucket --name my-large-object --multipart-download- threshold 750 --parallel-download-count 128
Answer: C
NEW QUESTION # 56
Which is the correct monitoring query that will monitor the CPU utilization threshold including an alarm?
- A. CpuUtilization[1m].max()
- B. CpuUtilization[1m]{shape = "VM.Standard.E4.Flex"}.max()
- C. (CpuUtilization[1m].max() > 80).grouping().sum()
- D. CpuUtilization[1m].max().grouping().sum()
Answer: C
NEW QUESTION # 57
You set up a bastion host in your Virtual Cloud Network (VCN) to allow only your IP ad-dress (140.19.2.140) to establish SSH connections with your compute instances that are deployed in a private subnet. The compute instances have an attached Network Security Group (NSG) with a Source Type:
Network Security Group (NSG), Source NSG: NSG-050504. To secure the bastion host, you add the following ingress rules to its NSG: Type: All TCP Proto-col: TCP Port Range: 22 Source: 140.19.2.140/32 Type: All TCP Protocol: TCP Port Range: 22 Source: NSG-050504 However, when you check the bastion host logs, you discover that there are IP addresses other than your own that can access your bastion host.
What is the root cause of this issue?
- A. The security list allows access to all IP addresses that override the NSG ingress rules.
- B. All compute instances associated with NSG-050504 are also able to connect to the bastion host.
- C. The port 22 provides unrestricted access to 140.19.2.140 and to other IP addresses.
- D. A netmask of /32 allows all IP addresses in the140.19.2.0 network, other than your IP 140.19.2.140.
Answer: B
NEW QUESTION # 58
You have created a group for several auditors. You assign the following policies to the group:
What actions are the auditors allowed to perform within your tenancy? (Choose the best answer.)
- A. Auditors are able to view all resources in the compartment.
- B. Auditors are able to create new instances in the tenancy.
- C. The Auditors are able to delete resource in the tenancy.
- D. The Auditors can view resources in the tenancy.
Answer: D
NEW QUESTION # 59
You have received an email from your manager to provision new resources on Oracle Cloud Infrastructure (OCI). When researching OCI, you determined that you should use OCI Resource Manager. Since this is a task that will be done multiple times for development, test, and production. You will need to create a command that can be re-used. Which CLI command can be used in this situation? (Choose the best answer.)
- A. oci resource-manager stack update --compartment-id <compartment_OCID> \ --config-source prod.zip --variables file://variables.json \ --display-name "Production stack build" \ --description Creating new Production environment
- B. oci resource-manager stack create --compartment-id <compartment_OCID> \ --config-source prod.zip --variables file://variables.json \ --display-name "Production stack build" \ --description Creating new Production environment
- C. oci resource-manager stack update --tenancy-id <tenancy_OCID> \ --config-source prod.zip --variables file://variables.json \ --display-name "Production stack build" \ --description Creating new Production environment
- D. oci resource-manager stack create --tenancy-id <tenancy_OCID> \ --config-source prod.zip --variables file://variables.json \ --display-name Production stack build \ --description Creating new Production environment
Answer: B
NEW QUESTION # 60
Which statement about Oracle Cloud Infrastructure paravirtualized block volume attachments is TRUE?
(Choose the best answer.)
- A. Paravirtualized volumes may reduce the maximum IOPS performance for larger block volumes.
- B. Paravirtualization utilizes the internal storage stack of compute instance OS and net-work hardware virtualization to access block volumes.
- C. Paravirtualized is required to manage iSCSI configuration for virtual machine instances.
- D. Paravirtualized volumes become immediately available on bare metal compute instances.
Answer: A
NEW QUESTION # 61
You use a bucket in Object Storage to store backups of a database. Versioning is enabled on these objects, so that every time you take a new backup, it creates a new version. You add the following life-cycle policy rule:
{ "action": "DELETE", "is-enabled": true, "name": "Delete-Rule", "object-name-filter": null, "target":
"objects", "time-amount": 60, "time-unit": "DAYS" } Which option is true regarding this rule?
- A. 60 days after the initial creation, any object will be deleted. Deletion marks the latest version as deleted but does not physically delete it.
- B. 60 days after the initial creation, any object will be deleted. Deletion will physically de-lete all versions of the object.
- C. If 60 days passes for an object without a new version being created, it will be deleted. Deletion marks the latest version as deleted but does not physically delete it.
- D. Once any specific version is 60 days old, it will be deleted. Deletion will physically delete the data.
Answer: C
NEW QUESTION # 62
One of the compute instances that you have deployed on Oracle Cloud Infrastructure (OCI) is malfunctioning. You have created a console connection to remotely troubleshoot it. Which two statements about console connections are TRUE? (Choose two.)
- A. It is not possible to use VNC console connections to connect to Bare Metal Instances.
- B. If you do not disconnect from the session, your serial console connection will automatically be terminated after 24 hours.
- C. It is not possible to connect to the serial console to an instance running Microsoft Windows, however VNC console connection can be used.
- D. For security purpose, the console connection will not let you edit system configuration files.
- E. VNC console connection uses SSH port forwarding to create a secure connection from your local system to the VNC server attached to your instance's console.
Answer: B,E
NEW QUESTION # 63
You have recently joined a startup company and quickly find that nobody is tracking the amount of money spent on Oracle Cloud Infrastructure (OCI). Seeing an opportunity to help save money you begin creating a solution to better track the cost of resources provisioned by each individual on the team. Which option allows you to identify excessive spend across all re-sources in your tenancy? (Choose the best answer.)
- A. Use the Python SDK to write a custom application that will monitor the Audit log. Look for CREATE events and configure the application to send you an email each time a new resource is created.
- B. Create a tag namespace named BILLING with a Tag Key named CostCenter. Tag each of your resources with this Tag Key and the correct value.
- C. Use the Events Service and create rules that will act when a new Object Storage bucket or Compute Instance has been created. Have the rule email you each time one of these events occurs.
- D. Create a budget for each compartment that will send a notification when monthly spend reaches a pre- defined amount.
Answer: D
NEW QUESTION # 64
You are asked to investigate a potential security risk on your company Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking through the audit logs for suspicious activity. How can you retrieve the audit logs using the OCI Command Line Interface (CLI)? (Choose the best answer.)
- A. oci audit event list --start-time $start-time -end-time $end-time -compartment-id $com-partment-id
- B. oci audit event list --start-time $start-time -compartment-id $compartment-id
- C. oci audit event list --end-time $end-time -compartment-id $compartment-id
- D. oci audit event list --start-time $start-time -end-time $end time -tenancy-id $tenancy id
Answer: A
NEW QUESTION # 65
You have a Terraform configuration that includes a VCN and three compute instances in the VCN. The configuration also includes a cloud-init script for each compute instance. You upload the configuration to OCI Resource Manager and run an apply job. Which option correctly describes the order of execution, assuming the configuration does not model explicit dependencies?
- A. Resource Manager provisions the VCN, then the compute instances one at a time. Terraform does not wait for the cloud-init script of each instance to complete before proceeding to the next instance.
- B. Resource Manager provisions the VCN, then the compute instances one at a time. Terraform waits for the cloud-init script of each instance to complete before proceeding to the next instance.
- C. Resource Manager provisions the VCN, then all compute instances in parallel.
- D. Resource Manager provisions the resources from top to bottom in the configuration file.
Answer: C
NEW QUESTION # 66
One of your development teams has asked for your help to standardize the creation of several compute instances that must be provisioned each day of the week. You initially write several Command Line Interface (CLI) commands with all appropriate configuration parameters to achieve this task later determining this method lacks flexibility. Which command generates a JSON-based template that Oracle Cloud Infrastructure (OCI) CLI can use to provision these instances on a regular basis? (Choose the best answer.)
- A. oci compute instance launch --generate-cli-skeleton
- B. oci compute instance create --generate-cli-skeleton
- C. oci compute provision-instance --generate-full-command-json-input
- D. oci compute instance launch --generate-full-command-json-input
Answer: D
NEW QUESTION # 67
You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.
The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the compute instance from the internet. However, you are not able to connect to the web server using your web browser.
Which step will resolve the issue? (Choose the best answer.)
- A. In the route table, add a rule for your default traffic to be routed to NAT gateway.
- B. In the security list, add an ingress rule for port 80 (http).
- C. In the security list, remove the ssh rule.
- D. In the route table, add a rule for your default traffic to be routed to service gateway.
Answer: B
NEW QUESTION # 68
You have been brought In to help secure an existing application that leverages Object Storage buckets to distribute content. The data is currently being shared from public buckets and the security team Is not satisfied with this approach. They have stated that all data must be stored In storage buckets. Your application should be able to provide secure access to the data. The URL that is provided for access to the data must be rotated every 30 days. Which design option will meet these requirements?
- A. Create a private bucket only to share the data.
- B. Use Pre-Authenticated request, even though there will be multiple URLs this will pro-vide better security.
- C. Create a new group and map users to this group, create a IAM policy providing access to Object Storage service only to this group. Users can then simply login to OCI console and retrieve needed flies.
- D. Create multiple bucket and classify them as Public and Private. Use public bucket for non-sensitive data and private bucket for sensitive data.
Answer: B
NEW QUESTION # 69
A developer has created a file system in the Oracle Cloud Infrastructure (OCI) File Storage service. She then launches an Oracle Linux compute instance and mounts the file system successfully on this instance. The next day, she tries writing to the file system from the compute instance using the following command: touch /mnt/yourmountpoint/helloworld.txt But receives an error message: touch: cannot touch '/mnt/yourmountpoint/helloworld.txt': Permission denied What might be the reason for this error?
- A. User is not part of any OCI Identity and Access Management (IAM) group with write permissions to the File Storage service.
- B. User is connecting as the default Oracle Linux user opc instead of the root user.
- C. Service limits or quota for file system writes have been breached.
- D. The touch command is not available in Oracle Linux, by default.
Answer: B
NEW QUESTION # 70
......
Updated 1z0-1067-24 Dumps Questions For Oracle Exam: https://testking.braindumpsit.com/1z0-1067-24-latest-dumps.html