Verified 1z0-1072-21 Exam Dumps Q&As - Provide 1z0-1072-21 with Correct Answers
Pass Your 1z0-1072-21 Dumps Free Latest Oracle Practice Tests
NEW QUESTION 95
Your application consists of three Oracle Cloud Infrastructure compute instances running behind a public load balancer. You have configured the load balancer to perform health checks on these instances, but one of the three instances fails to pass the configured health check. Which of the following action will the load balancer perform?
- A. Terminate the instance that failed health check
- B. Stop the instances that failed health check
- C. Remove the instance that failed the health check from the backend set
- D. Stop sending traffic to the instance that failed health check
Answer: D
Explanation:
Explanation
health check A test to confirm the availability of backend servers. A health check can be a request or a connection attempt. Based on a time interval you specify, the load balancer applies the health check policy to continuously monitor backend servers. Ifa server fails the health check, the load balancer takes the server temporarily out of rotation. If the server subsequently passes the health check, the load balancer returns it to the rotation.
You configure your health check policy when you create a backend set. You can configure TCP-level or HTTP-level health checks for your backend servers.
- TCP-level health checks attempt to make a TCP connection with the backend servers and validate the response based on the connection status.
- HTTP-level health checks send requests to the backend servers at a specific URI and validate the response based on the status code or entity data (body) returned.
The service provides application-specific health check capabilities to help you increase availability and reduceyour application maintenance window.
NEW QUESTION 96
Which two components cannot be deleted in yourOracle Cloud Infrastructure Virtual Cloud Network? (Choose two.)
- A. Routing gateway
- B. Service gateway
- C. Default security list
- D. Default route table
- E. Default subnet
Answer: C,D
Explanation:
Reference:https://www.oracle.com/a/ocom/docs/vcn-deployment-guide.pdf(4)
NEW QUESTION 97
Which two options are necessary for achieving high availability on OracleCloud Infrastructure?
- A. Configure your database to have Data Guard in another Availability Domain in Sync mode within a region.
- B. Store your database across multiple regions so that half of the data resides in one region and the other half resides in another region.
- C. Store your database files on Object Storage so that they are available in all Availability Domains in all regions.
- D. Attach your block volume form Availability Domain 1 to a compute instance in AvailabilityDomain 2 (and vice versa) so that they are highly available.
- E. Distribute your application servers across all Availability Domains within a region.
Answer: A,E
Explanation:
Explanation
All details can find in "Best Practices for Deploying High Availability Architecture on Oracle Cloud Infrastructure"
https://docs.cloud.oracle.com/en-us/iaas/Content/Resources/Assets/whitepapers/best-practices-deploying-ha-arch
NEW QUESTION 98
In what two ways does Oracle Cloud Infrastructure (OCI) file storage service differ from OCI object storage and block volume services?
- A. Block volume service Is NVMe based, while file storage service is not.
- B. File storage mount target does not provide a private IP address, while the object storage bucket provides one.
- C. File Storage uses the network file system (NFS) protocol, whereas block volume uses iSCSI.
- D. You can move object storage buckets, block volumes and file storage mount targets between compartments.
Answer: C,D
Explanation:
Explanation
The mount target provides the IP address or DNS name that is used together with a unique export path to mount the file system.
You can move mount targets from one compartment to another.
NEW QUESTION 99
As the Cloud Architect for your company, you have been tasked with designing a high performance (HPC) cluster in Oracle Cloud Infrastructure (OCI). The following requirements have been defined:
* The cluster must be a minimum of three nodes, but may increase to six nodes when demand requires.
* The cluster must be resilient to any potential infrastructure failures.
* To minimize latency, all nodes must be deployed within the same availability domain (AD).
* Adding or replacing nodes within the cluster should take no more than 30 minutes.
Which twosteps should be performed to satisfy these requirements in OCI? (Choose two.)
- A. Deploy the cluster in a single AD. Place each of the nodes in one of the three different fault domains in that AD.
- B. Deploy the cluster in a single AD. Place each of the nodes in a different virtual cloud network (VCN) subnet.
- C. Create a backup of your HPC node compute instance boot volume. Launch new compute instances directly from thebackup reduce provisioning time.
- D. Create a custom image of your HPC node compute instance. Launch new compute instances using this image to reduce provisioning time.
- E. Deploy the cluster in a single AD with a shared file system that leverages the file storage service (FSS).
Deploy a standby cluster in another AD and configure it to use thesame shared file system.
Answer: A,D
Explanation:
Explanation
A fault domain is a grouping of hardware and infrastructure within an availability domain. Each availability domain contains three fault domains. Fault domains provide anti-affinity: they let you distribute your instances so that the instances are not on the same physical hardware within a single availability domain. A hardware failure or Compute hardware maintenance event that affects one fault domain does not affect instances in other fault domains. In addition, thephysical hardware in a fault domain has independent and redundant power supplies, which prevents a failure in the power supply hardware within one fault domain from affecting other fault domains.
To control the placement of your compute instances, bare metal DB system instances, or virtual machine DB system instances, you can optionally specify the fault domain for a new instance or instance pool at launch time. If you don't specify the fault domain, the system selects one for you. Oracle Cloud Infrastructure makes a best-effort anti-affinity placement across different fault domains, while optimizing for available capacity in the availability domain. To change the fault domain for an instance, terminate it and launch a new instance in the preferred fault domain.
Use fault domains to do the following things:
Protect against unexpected hardware failures or power supply failures.
Protect against planned outages because of Compute hardware maintenance.
NEW QUESTION 100
Which two are valid options when migrating a database from on-premise to Oracle Cloud Infrastructure?
(Choose two.)
- A. converting the Oracle database to a NoSQL database and migrating to Oracle Cloud Infrastructure by using rsync file copy
- B. performing RMAN backup to an on-premise storage device, and then shipping to Oracle Cloud Infrastructure
- C. performing a backup to Oracle Cloud Infrastructure Object Storage, and then restoring to a database server on Oracle Cloud Infrastructure
- D. snapping or cloning storage form on-premise to Oracle Cloud Infrastructure
Answer: B,D
NEW QUESTION 101
You have an application deployed in Oracle Cloud Infrastructure running only in the Phoenix region. You were asked to create a disaster recovery (DR)plan that will protect against the loss of critical data. The DR site must be at least 500 miles from your primary site and data transfer between the two sites must not traverse the public Internet.
Which is the recommended disaster recovery plan?
- A. Create a new virtual cloud network (VCN) in the Phoenix region and create a subnet in one availability domain (AD) that is not currently being used by your production systems. Establish VCN peering between the production and DR sites.
- B. Create a DR environment in Ashburn. Associate a DRG with the VCN in each region and create a remote peering connection between the two VCNs.
- C. Create a DR environment in Ashburn and provision a FastConnect virtual circuit using DRG between the regions.
- D. Create a DR environment in Ashburn. Associate a dynamic routing gateway (DRG) with the VCN in each region and configure an IPsec VPN connection between the two regions.
Answer: B
Explanation:
Explanation
Remote VCN peering is the process of connecting two VCNs in different regions (but the same tenancy ). The peering allows the VCNs' resources to communicate using private IP addresses without routing the traffic over the internet or through your on-premises network. Without peering, a given VCN would need an internet gateway and public IP addresses for the instances that need to communicate with another VCN in a different region.
At a high level, the Networking service components required for a remotepeering include:
- Two VCNs with non-overlapping CIDRs, in different regions that support remote peering. The VCNs must be in the same tenancy.
- A dynamic routing gateway (DRG) attached to each VCN in the peering relationship. Your VCN already has a DRG if you're using an IPSec VPN or an Oracle Cloud Infrastructure FastConnect private virtual circuit.
A remote peering connection (RPC) on each DRG in the peering relationship.
A connection between those two RPCs.
Supporting route rules to enable traffic to flow over the connection, and only to and from select subnets in the respective VCNs (if desired).
Supporting security rules to control the types of traffic allowed to and from the instances in the subnets that need to communicate with the other VCN.
NEW QUESTION 102
You have created a virtual cloudnetwork (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains a DB System. The application requires a shared file system so you have provisioned one using the file storage service (FSS). You also created the corresponding mount target in one of the application subnets. The VCN security lists are properly configured so that both application servers and the DB System can access the file system. The security team determines that the DB System should haveread-only access to the file system.
What change would you make to satisfy this requirement?
- A. Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet.
- B. Create an instance principal for the DB System. Write an Identity and Access Management (IAM) policy that allows the instance principal read-only access to the filestorage service.
- C. Connect via SSH to one of the application servers where the file system has been mounted. Use the Unix command chmod to change permissions on the file system directory, allowing the database user read only access.
- D. Modify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateless.
Answer: A
Explanation:
Explanation
NFS export options enable you to create more granular access control than is possible using just security list rules to limit VCN access. You can use NFS export options to specify access levels for IP addresses or CIDR blocks connecting to file systems through exports in a mount target.
NEW QUESTION 103
Which statement is true about interconnecting Virtual CloudNetwork (VCN)?
- A. VCNs must be in the same tenancy to be peered.
- B. The only way to interconnect VCNs is through peering.
- C. VCNs support transitive peering.
- D. Peering VCNs should not have overlapping CIDR blocks.
Answer: D
Explanation:
Reference:https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/remoteVCNpeering.htm(note)
NEW QUESTION 104
Which two statements are true about policies?
- A. You can use read, write, manage, and inspect as verbs for defining a policy.
- B. Apolicy is a document that specifies who can access which Oracle Cloud Infrastructure resources that your company has, and how.
- C. You can deny access toa group via policies.
- D. Users need not do anything but still have to be added to a group with appropriate policies defined.
Answer: B,D
NEW QUESTION 105
You have multiple applicationsinstalled on a compute instance and these applications generate a large amount of log files. These log files must reside on the boot volume for a minimum of 15 days and must be retained for at least 60 days. The 60-day retention requirement is causing an issue with available disk space.
What are the two recommended methods to provide additional boot volume space for this compute instance?
(Choose two.)
- A. Create and attach a block volume to the compute instance and copythe log files.
- B. Create a custom image and launch a new compute instance with a larger boot volume size.
- C. Write a custom script to remove the log files on a daily basis and free up the space on the boot volume.
- D. Create an object storage bucket and use a script that runs daily to move log files older than 15 days to the bucket.
- E. Terminate the instance while preserving the boot volume. Create a new instance from the boot volume and select a DenseIO shape to take advantage of local NVMe storage.
Answer: B,D
Explanation:
Explanation
These log files must resideon the boot volume for a minimum of 15 days so you have to increase the boot Volume
NEW QUESTION 106
You work for a health insurance company that stores a large number of patient health records in an Oracle Cloud Infrastructure (OCI) Object Storage bucket named "HealthRecords".
Each record needs to be securely stored for a period of 5 years for regulatory compliance purposes and cannot be modified, overwritten or deleted during this time period.
What can you do to meet this requirement?
- A. Enable versioning on the HealthRecords bucket.
- B. Create an OCI Object Storage time-bound Retention Rule on the HealthRecords bucket for five years.
Enable Retention Rule Lock on this bucket. - C. Create an OCI Object Storage Lifecycle Policies rule to archive objects in the HealthRecords bucket for five years.
- D. Enable encryption on the HealthRecords bucket using your own vault master encryption keys.
Answer: B
Explanation:
Reference:https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/usingretentionrules.htm
NEW QUESTION 107
Which statement is true about DB Systems?
- A. Data Guard as a Service is offered between regions.
- B. You have full control over the automatic backup schedule and retention periods.
- C. You cannot manage the database as sys/sysdba.
- D. You can manage Oracle database initialization parameters at a global level.
Answer: B,C
NEW QUESTION 108
Which two features are offered natively on Oracle Cloud Infrastructure Database Cloud Service (DBCS)?(Choose two.)
- A. backup to Object Storage
- B. Data Guard in Async mode within a region
- C. GoldenGate replication between two regions
- D. Data Guard in Maximum Protection mode
Answer: A,B
Explanation:
Explanation
Data Guard in Maximum Performance protection mode is supported notsimply Maximum Protection mode, however, you can configure additional protection modes and transport types by logging on to the DB system and accessing Data Guard command-line interface( DGMGRL).
NEW QUESTION 109
Which of the following statement is true regarding Oracle Cloud Infrastructure Object Storage Pre-Authenticated Requests?
- A. Pre-authenticated requests don't have an expiration
- B. It Is not possible to create pre-authenticated requests for "archive" storage tier
- C. Changing the bucket visibility does not change existing pre-authenticated requests
- D. It is not possible to create pre-authenticated requests for the buckets, but only for the objects
Answer: C
Explanation:
Explanation
Pre-authenticated requests provide a way to let users access a bucket or an object without having their own credentials, as long as the request creator has permissions to access those objects. For example, you can create a request that lets an operations support user upload backups to a bucket without owning API keys. Or,you can create a request that lets a business partner update shared data in a bucket without owning API keys.
When you create a pre-authenticated request, a unique URL is generated. Anyone you provide this URL to can access the Object Storage resourcesidentified in the preauthenticated request, using standard HTTP tools like curl and wget.
Understand the following scope and constraints regarding pre-authenticated requests:
Users can't list bucket contents.
You can create an unlimited number of pre-authenticated requests.
There is no time limit to the expiration date that you can set.
You can't edit a pre-authenticated request. If you want to change user access options in response to changing requirements, you must create a new preauthenticated request.
The target and actions for a pre-authenticated request are based on the creator's permissions. The request is not, however, bound to the creator's account login credentials. If the creator's login credentials change, a pre-authenticated request is not affected.
You cannot delete a bucket that has a pre-authenticated request associated with that bucket or with an object in that bucket.
Understand the following scope and constraints regarding public access:
Changing the type of access is bi-directional.You can change a bucket's access from public to private or from private to public.
Changing the type of access doesn't affect existing pre-authenticated requests. Existing pre-authenticated requests still work.
NEW QUESTION 110
Within your tenancy you have a compute instance with a boot volume and a block volume attached. The boot volume contains the OS and the attached block volume contains the instance's important data. Logs on the boot volume have filled the boot volume and are causing issues with the OS.
What should you do to resolve this situation?
- A. Stop the instance that is full. Create a manual backup of the block storage before making changes.
Detach the block volume, create a new instance ofthe same shape with a larger custom boot volume and attach the block volume to the new instance. Configure the OS and any related application(s) to access the block volume under the same mount point as before. - B. Create a manual backup of the block storage instance. Create a custom imageof the full instance. Once that completes deploy the custom image to a new instance.
- C. Detach the block volume from the full instance. Create a new instance of the same shape with a larger boot volume and rsync the state of the boot volume between the instances. Attach the block volume to the new instance.
- D. Create a new instance with a larger boot volume size as well a new block volume which is the same size or larger than the one attached to the full instance. rsync the state of the boot volume and the state of the block volume between the two instances.
Answer: A
Explanation:
Explanation
https://docs.cloud.oracle.com/en-us/iaas/Content/Block/Tasks/resizingavolume.htm
NEW QUESTION 111
In which language are Terraform and Terraform providers written?
- A. Python
- B. Ruby
- C. C
- D. Go
Answer: D
Explanation:
Explanation
References:https://www.terraform.io/docs/extend/writing-custom-providers.html
NEW QUESTION 112
Where do you findthe tnsnames.ora for your Autonomous Data Warehouse (ADW) database?
- A. You are automatically prompted to download the tnsnames.ora file upon creation of the ADW database
- B. The ADW database will place the tnsnames.ora file in an object storage bucket
- C. You can download tnsnames.ora from Oracle Cloud Infrastructure web console under ADW details page
- D. The tnsnames.ora file is included in credentials.zip file that you download from service console of ADW
Answer: D
Explanation:
Explanation
https://docs.oracle.com/en/cloud/paas/autonomous-data-warehouse-cloud/user/connect-intorduction.html#GUID To download client credentials from the Autonomous Transaction Processing Service Console:
- From the Service Console click the Administration link.
-Click Download Client Credentials (Wallet).
- On the Download Client Credentials (Wallet) page, enter a wallet password in the Password field and confirm the password in the Confirm Password field. The password must be at least 8 characters long and must include at least 1 letter and either 1 numeric character or 1 special character. This password protects the downloaded Client Credentials wallet.
- Click Download to save the client security credentials zip file. By default the filename is:
Wallet_databasename.zip. You can save this file as any filename you want. You must protect this file to prevent unauthorized database access.
The zip file includes the following:
tnsnames.ora and sqlnet.ora: Network configuration files storing connect descriptors and SQL*Net client side configuration.
cwallet.sso and ewallet.p12: Auto-open SSO wallet and PKCS12 file. PKCS12 file is protected by the wallet password provided in the UI.
keystore.jks and truststore.jks: Java keystore and truststore files. They are protected by the wallet password provided while downloading the wallet.
ojdbc.properties: Contains the wallet related connection property required for JDBC connection. This should be in the same path as tnsnames.ora.
NEW QUESTION 113
Which two statements are true about Oracle Cloud Infrastructure (OCI) DB Systems?
- A. Customers can consolidate multiple database homes on asingle virtual machine database host.
- B. Customers have no control over database patching.
- C. Customers can manage the TDE Wallet after DB Systems is provisioned.
- D. The database and backups are encrypted by default.
Answer: C,D
Explanation:
All databases created in Oracle Cloud Infrastructure are encrypted using transparent data encryption (TDE).
Oracle Cloud Infrastructure encrypts all managed backups in the object store. Oracle uses the Database Transparent Encryption feature by default for encrypting the backups. and the customers can manage the TDE Wallet after DB Systems are provisioned.
NEW QUESTION 114
What is the maximum IP address size range that you can have in a Virtual Cloud Network?
- A. /24
- B. /26
- C. /16
- D. /8
Answer: C
Explanation:
Explanation
When you create your VCN, you assign a contiguous IPv4 CIDR block of your choice. VCN sizes ranging from /16 (65,533 IP addresses) to /30 (1 IP address) are allowed. Example: 10.0.0.0/16, 192.168.0.0/24.
NEW QUESTION 115
......
Get Top-Rated Oracle 1z0-1072-21 Exam Dumps Now: https://www.fast2test.com/1z0-1072-21-premium-file.html