최신 1z0-1067-24 무료덤프 - Oracle Cloud Infrastructure 2024Cloud Operations Professional

문제1

You have ordered two FastConnect connections that provide a high availability connection architecture between your on-premises data center and Oracle Cloud Infrastructure (OCI). You want to run these connections in an ACTIVE/PASSIVE architecture. How can you accomplish this? (Choose the best answer.)

A. Decrease the prefix length of AS for the FastConnect you want to use as PASSIVE connection.

B. Use AS PATH prepending with your routes.

C. Enable BGP on the FastConnect that you want as the ACTIVE connection.

D. Adjust one of the connections to have a higher ASN.

정답: B

문제2

You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:

A. You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet. Which action would you take to accomplish the task? (Choose the best answer.)

B. In the default security list, add a stateful rule to allow ingress access on port 443.

C. Create an NSG, add a stateful rule to allow ingress access on port 443, and associate it with the public subnet that hosts the company website.

D. Create a Network Security Group (NSG), add a stateful rule to allow ingress access on port 443, and associate it with the instance that hosts the company website.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제3

You have been asked to ensure that in-transit communication between an Oracle Cloud Infrastructure (OCI) compute instance and an on-premises server (192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a Dynamic IPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added. What solution should you recommend? (Choose the best answer.)

A. Advertise a 192.168.10.10/32 router over the FastConnect.

B. The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.

C. Advertise a 192.168.10.10/32 route over the VPN.

D. The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.

정답: C

문제4

You are asked to implement the disaster recovery (DR) and business continuity requirements for Oracle Cloud Infrastructure (OCI) Block Volumes. Two OCI regions being used: a primary/source region and a DR/destination region. The requirements are: There should be a copy of data in the destination region to use if a region-wide disaster occurs in the source region
* Minimize costs Which design will help you meet these requirements? (Choose the best answer.)

A. Clone block volumes. Use Object Storage lifecycle management to automatically move clone objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.

B. Back up block volumes. Copy block volume backups from source region to destination region at regular intervals.

C. Clone block volumes. Copy block volume clones from source region to destination region at regular intervals.

D. Back up block volumes. Use Object Storage lifecycle management to automatically move backup objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.

정답: D

문제5

As a solution architect of the Oracle Cloud Infrastructure tenancy, you have been asked to provide members of group CloudOps the ability to view and retrieve monitoring metrics, but only for all monitoring-enabled compute instances. Which policy statement will you define to grant this access?

A. Allow group CloudOps to read metrics in tenancy where tar-get.metrics.monitoring='oci_computeagent'

B. Allow group CloudOps to read metrics in tenancy where tar-get.metrics.namespace=oci_computeagent

C. Restricting monitoring access only to compute instances metrics is not possible.

D. Allow group CloudOps to read compute-metrics in tenancy

정답: B

문제6

You have been brought In to help secure an existing application that leverages Object Storage buckets to distribute content. The data is currently being shared from public buckets and the security team Is not satisfied with this approach. They have stated that all data must be stored In storage buckets. Your application should be able to provide secure access to the dat a. The URL that is provided for access to the data must be rotated every 30 days. Which design option will meet these requirements?

A. Use Pre-Authenticated request, even though there will be multiple URLs this will pro-vide better security.

B. Create a new group and map users to this group, create a IAM policy providing access to Object Storage service only to this group. Users can then simply login to OCI console and retrieve needed flies.

C. Create multiple bucket and classify them as Public and Private. Use public bucket for non-sensitive data and private bucket for sensitive data.

D. Create a private bucket only to share the data.

정답: A

문제7

You are working with Terraform on your laptop and have been tasked with spinning up multiple compute instances in Oracle Cloud Infrastructure (OCI) for a project. In addition, you are also required to collect IP addresses of provisioned instances and write them to a file and save it in your laptop. Which specific Terraform functionality can help accomplish this task? (Choose the best answer.)

A. Terraform remote-exec

B. Terraform modules

C. Terraform local-exec

D. Terraform remote state

정답: C

문제8

A developer has created a file system in the Oracle Cloud Infrastructure (OCI) File Storage service. She then launches an Oracle Linux compute instance and mounts the file system successfully on this instance. The next day, she tries writing to the file system from the compute instance using the following command: touch /mnt/yourmountpoint/helloworld.txt But receives an error message: touch: cannot touch '/mnt/yourmountpoint/helloworld.txt': Permission denied What might be the reason for this error?

A. Service limits or quota for file system writes have been breached.

B. User is not part of any OCI Identity and Access Management (IAM) group with write permissions to the File Storage service.

C. User is connecting as the default Oracle Linux user opc instead of the root user.

D. The touch command is not available in Oracle Linux, by default.

정답: C

문제9

You have been asked to set up connectivity between a client on-premises network and Oracle Cloud Infrastructure (OCI). The requirements are:
* Low latency: The applications are financial and require low latency connectivity into OCI.
* Consistency: The application is not tolerant of performance variation.
* Performance: The communications link needs to support up to 1.25 Gbps.
* Encryption: The communications link needs to encrypt any data in transit between the on-premises network and OCI Virtual Cloud Network (VCN). The client wants to implement the above with as low a cost as possible, while meeting all of the requirements. What should you suggest? (Choose the best answer.)

A. Provision a site-to-site IPsec VPN between your on-premises network and your virtual cloud network (VCN) using VPN Connect.

B. Provision FastConnect with a single private virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.

C. Provision FastConnect with a single public virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.

D. Provision FastConnect with a single private virtual circuit.

E. Provision FastConnect with a single public virtual circuit.

정답: C

문제10

An insurance company has contracted you to help automate their application business continuity plan. They have the application running in eu-frankfurt-1 as the primary site and uk-london-1 as a disaster recovery site. Normally they have a DNS A record associated with the IP address of the primary endpoint in eu- frankfurt-1. In the event of a disaster, they use OCI DNS Zone Management to update the A record and replace it with the IP address of the end-point in uk- londond-1. How can you automate the failover process? (Choose the best answer.)

A. Create a Health Check that evaluates both regional endpoints. Create a Traffic Management Steering policy with Failover type and associate it with the Health Check.

B. Create a Traffic Management Steering policy with Load Balancer type and add both eu-frankfurt-1 and uk-london-1 endpoints. Attach the Traffic Management Steering policy to the A record.

C. Provision a Load Balancer in Frankfurt and associate it with the A record in DNS. Create a backend set with backend servers from both eu-frankfurt-1 and uk- london-1 regions.

D. Create a Traffic Management Steering policy and attach it to a backend servers from both eu-frankfurt-1 and uk-london-1 regions.

정답: A

최신 1z0-1067-24 무료덤프 - Oracle Cloud Infrastructure 2024Cloud Operations Professional

우리와 연락하기

유용한 링크

최신 업데이트