Practice Test for 1z0-1072-23 Certification Real 2024 Mock Exam [Q25-Q49]

Practice Test for 1z0-1072-23 Certification Real 2024 Mock Exam

Prepare For Realistic 1z0-1072-23 Dumps PDF - 100% Passing Guarantee

NEW QUESTION # 25
As a solution architect, you are showcasing the Oracle Cloud Infrastructure (OCI) Object Storage feature about Object Versioning to a customer.
Which statement is true regarding OCI Object Storage Versioning?

A. Objects are physically deleted from a bucket when versioning is enabled.
B. Object Versioning is disabled on a bucket by default.
C. A bucket that is versioning-enabled can and will always have the latest version of the object in the bucket.
D. Object Versioning does not provide data protection against accidental or malicious object update,

Answer: B

Explanation:
overwrite, or deletion.
Explanation:
Object Versioning is disabled on a bucket by default is a true statement regarding OCI Object Storage Versioning. Object Versioning is a feature that allows users to preserve, retrieve, and restore every version of every object stored in a bucket. Object Versioning is disabled on a bucket by default, but can be enabled or suspended by the user at any time. The other statements are false regarding OCI Object Storage Versioning. Reference: [Object Versioning]

NEW QUESTION # 26
You have an instance running in Oracle Cloud Infrastructure (OCI) that cannot be live-migrated during an infrastructure maintenance event. OCI schedules a maintenance due date within 14 to 16 days and sends you a notification.
What would happen if you choose not to proactively reboot the instance before the scheduled maintenance due date?

A. You will receive another notification to reboot within the next 14 days.
B. The instance will get terminated.
C. The instance is either reboot-migrated or rebuilt in place for you.
D. You will receive another notification to reboot within the next 7 days.

Answer: C

Explanation:
If you choose not to proactively reboot the instance before the scheduled maintenance due date, the instance is either reboot-migrated or rebuilt in place for you. Reboot-migration is a process where OCI migrates your instance to a new physical host without changing its configuration or public IP address. Rebuild in place is a process where OCI shuts down your instance, performs maintenance on the physical host, and restarts your instance with the same configuration and public IP address. The other options are not correct. Reference: [Reboot-Migration], [Rebuild in Place]

NEW QUESTION # 27
As your company's cloud architect, you have been invited by the CEO to join his staff meeting. They want your input on interconnecting Oracle Cloud Infrastructure (OCI) to another cloud provider in London, with some specific requirements:
* They want resources in the other cloud provider to leverage OCI Autonomous Data Warehouse ML capabilities.
* The connection between OCI and the other cloud provider should be provisioned as quickly as possible.
* The connection should offer high bandwidth and predictable performance.
Which other cloud provider should you recommend to interconnect with OCI and meet the above requirements?

A. Google Cloud
B. Amazon Web Services
C. OCI
D. Microsoft Azure
E. IBM Cloud
F. Digital Ocean
G. Alibaba Cloud

Answer: D

Explanation:
The explanation is that Microsoft Azure is one of the cloud providers that has an interconnect location with OCI in London. This means that you can use OCI FastConnect to establish a private and dedicated connection between OCI and Azure in London, with high bandwidth and predictable performance. This connection can also enable you to leverage OCI Autonomous Data Warehouse ML capabilities from Azure resources, as you can access OCI services across regions using private IP addresses. The interconnect location can be provisioned quickly using the OCI and Azure consoles or APIs.

NEW QUESTION # 28
You are backing up your on-premises data to the Oracle Cloud Infrastructure (OCI) Object Storage Service.
Your requirements are:
1. Backups need to be retained for at least full 31 days.
2. Data should be accessible immediately if and when needed after the backup.
Which OCI Object Storage tier is suitable for storing the backup to minimize cost?

A. Infrequent Access tier
B. Auto-Tiering tier
C. Standard tier
D. Archive tier

Answer: A

Explanation:
The explanation is that the Infrequent Access tier is suitable for storing data that is accessed less frequently but requires immediate access when needed. The Infrequent Access tier has lower storage costs than the Standard tier, but higher retrieval costs. The Infrequent Access tier also has a minimum storage duration of 30 days, which means that you will be charged for at least 30 days of storage even if you delete or move the data before that period.

NEW QUESTION # 29
You created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain applicationservers and the third subnet contains a DB System. The application requires a shared file system, therefore youhave provisioned one using the file storage service (FSS).
You have also created the corresponding mount target in one of the application subnets. The VCN security listsare properly configured so that the application servers can access FSS. The securityteam changed the settings forthe DB System to have read-only access to the file system. However when they testit, they are unable to accessFSS.
How would you allow access to FSS?

A. Change the ingress rules corresponding to the DB System subnet to be stateful.
B. Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DBSystem subnet.
C. Create an instance principal for the DB System. Write an Identity andAccess Management (IAM) policythat allows the instance principal read-only access to the file storage service.
D. Modify the security list associated with the subnet where the mount target resides.
E. Modify the security list associated with the subnet where the mount target resides. Change the ingressrules corresponding to the DB System subnet to be stateless.

Answer: B

Explanation:
Explanation
Creating an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet is the correct answer. This is because NFS export options are used to control the level of access that clients have to file systems. By creating an NFS export option with READ_ONLY access for the DB System subnet, you can allow the DB System to read data from the file system, but not write or modify it.
The other options are not correct, as they do not address the requirement of read-only access for the DB System. References: [NFS Export Options]

NEW QUESTION # 30
You want to distribute DNS traffic to different endpoints based on the location of the end user. Which Traffic Management Steering Policy would you use?

A. Failover
B. IP Prefix
C. Geolocation
D. Load Balancer

Answer: C

Explanation:
The explanation is that geolocation is a type of Traffic Management Steering Policy that allows you to distribute DNS traffic to different endpoints based on the location of the end user. Geolocation steering policies use geolocation data from third-party providers to map end user IP addresses to geographic regions. You can create rules that specify which endpoints to serve for each region or country, or use a default endpoint for unspecified regions.

NEW QUESTION # 31
Which is NOT a valid option for an Oracle Cloud Infrastructure (OCI) compute shape?

A. Exadata Virtual Machine
B. Bare Metal
C. Dedicated Virtual Machine Host
D. Virtual Machine

Answer: A

Explanation:
Explanation
Exadata Virtual Machine is not a valid option for an OCI compute shape. Exadata Virtual Machine is a deployment option for Exadata Cloud Service or Exadata Cloud@Customer, which are services that provide dedicated Exadata infrastructure for running Oracle databases in OCI. Exadata Virtual Machine allows you to create multiple virtual machines on each Exadata compute node and isolate them from each other using Oracle VM technology. The valid options for OCI compute shapes are:
Bare Metal: A bare metal instance is a physical server that gives you direct access to the underlying hardware and full isolation from other tenants.
Dedicated Virtual Machine Host: A dedicated virtual machine host is a physical server that hosts only your virtual machine instances and no other tenant's instances.
Virtual Machine: A virtual machine instance is a virtual server that runs on a shared physical server with other tenants' instances.
Burstable: A burstable instance is a virtual machine instance that has a baseline utilization of either 12% or 50% of each CPU core and can burst above the baseline when needed.

NEW QUESTION # 32
In which two ways can Oracle Security Zones assist with the cloud security shared responsibility model?

A. Deny public access to Oracle Cloud Infrastructure resources, such as databases and object storage buckets.
B. Encrypt storage resources with a customer-managed key.
C. Allow access to an unsecured compartment, which is moved from a standard compartment.
D. Add or move a standard compartment to a highly secured security zone compartment.

Answer: A,B

Explanation:
Explanation
Oracle Security Zones is a service that helps you enforce best practices and prevent misconfigurations on your OCI resources by applying predefined policies and controls. Some of the benefits of using Security Zones are:
Encrypt storage resources with a customer-managed key: Security Zones require that all storage resources, such as block volumes, boot volumes, file systems, and object storage buckets, are encrypted with a customer-managed key from Vault. This ensures that you have full control over the encryption and decryption of your data at rest.
Deny public access to OCI resources, such as databases and object storage buckets: Security Zones prevent you from creating or updating OCI resources that have public access enabled, such as databases and object storage buckets that are accessible from the internet. This reduces the risk of unauthorized access or data leakage.

NEW QUESTION # 33
Which statement is NOT correct regarding the Oracle Cloud Infrastructure (OI) File System snapshots?

A. Even if nothing has changed within the file system since the last snapshot was taken, a new snapshot consumes more storage.
B. Snapshots are a consistent, point-in-time view of your file systems.
C. Snapshots are accessible under the root directory of the file system at .snapshot/name.
D. Before you can clone a file system, at least one snapshot must exist for the file system.

Answer: A

Explanation:
Even if nothing has changed within the file system since the last snapshot was taken, a new snapshot does not consume more storage. This is because snapshots are incremental and only store the changes made to the file system since the previous snapshot. The other statements are correct regarding the OCI File System snapshots. Reference: [Snapshots and Storage Consumption]

NEW QUESTION # 34
In which TWO ways does Cloud Guard help improve the overall security posture for your tenancy?

A. Monitors unauthorized or suspicious user activity.
B. Masks sensitive data and monitors security controls on your Oracle databases.
C. Allows you to centrally manage encryption keys.
D. Helps detect misconfigured resources, such as publicly accessible Object Storage buckets, instances, and restricted ports on security lists.
E. Prevents you from creating misconfigurations on your resources in Oracle Cloud Infrastructure (OCI).

Answer: A,D

Explanation:
Monitors unauthorized or suspicious user activity, prevents you from creating misconfigurations on your resources in OCI, and helps detect misconfigured resources, such as publicly accessible Object Storage buckets, instances, and restricted ports on security lists. The explanation is that Cloud Guard is a service that helps you improve the security posture of your tenancy by providing visibility into your cloud resources, identifying security misconfigurations and threats, and taking corrective actions to remediate them. Cloud Guard monitors user activity and resource configurations using data collectors and detectors, evaluates them against predefined or custom rules, generates problems and recommendations based on severity levels, and executes responders to fix the issues automatically or manually.

NEW QUESTION # 35
When creating an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) with the VCN wizard, which THREE gateways are created automatically?

A. Bastion Host
B. Internet Gateway
C. Service Gateway
D. Storage Gateway
E. Dynamic Routing Gateway
F. Local Peering Gateway
G. NAT Gateway

Answer: B,C,G

Explanation:
Explanation
Internet Gateway, NAT Gateway, and Service Gateway are three gateways that are created automatically when creating a VCN with the VCN wizard. An Internet Gateway allows public traffic between the VCN and the internet. A NAT Gateway allows private traffic from the VCN to access the internet without exposing the VCN resources to incoming internet connections. A Service Gateway allows private traffic from the VCN to access OCI services such as Object Storage, Email Delivery, and Notifications. The other options are not created automatically by the VCN wizard, but can be added manually later if needed. References: [VCN Wizard], [Gateways]

NEW QUESTION # 36
Which statement accurately describes the key features and benefits of OCI Confidential Computing?

A. It enables users to securely store and retrieve data by using distributed file systems, ensuring high availability and fault tolerance.
B. It provides automatic scalability and load balancing capabilities, which allow seamless integration with other cloud providers.
C. It optimizes network performance and reduces latency through advanced routing algorithms and caching mechanisms.
D. It encrypts and isolates in-use data and the applications processing that data, thereby preventing unauthorized access or modification.

Answer: D

Explanation:
It encrypts and isolates in-use data and the applications processing that data, thereby preventing unauthorized access or modification is an accurate description of the key features and benefits of OCI Confidential Computing. Confidential Computing is a feature that leverages hardware-based Trusted Execution Environments (TEEs) to protect data and applications from unauthorized access or modification while they are in use by the CPU or memory. This adds an extra layer of security to cloud computing, as it protects data not only at rest and in transit, but also in use. The other options are not accurate descriptions of the key features and benefits of OCI Confidential Computing. Reference: [Confidential Computing]

NEW QUESTION # 37
You are using the Oracle Cloud Infrastructure (OCI) Vault service to create and manage Secrets. For your database password, you have created a secret and rotated the secret one time. The secret versions are as follows:
-----------------------------------------
2 (latest) | Current
1 | Previous
You later realize that you have made a mistake in updating the secret content for version 2 and want to rollback to version 1.
What should you do to rollback to version 1?

A. From the version 2 (latest) menu, select "Rollback" and select version 1 when given the option.
B. Deprecate version 2 (latest). Create new Secret version 3. Create soft link from version 3 to version 1.
C. From the version 1 menu on the OCI console, select "Promote to Current".
D. Create a new secret version 3 and set to Pending. Copy the content of version 1 into version 3.

Answer: C

Explanation:
From the version 1 menu on the OCI console, select "Promote to Current". The explanation is that when you promote a secret version to current, it becomes the latest version of the secret and is used by default when you access the secret. This way, you can rollback to a previous version of the secret without creating a new version.

NEW QUESTION # 38
You plan to launch a VM instance with the VM.Standard2.24 shape and Oracle Linux 8 platform image. You wantto protect your VM instance from low-level threats, such as rootkits and bootkits that can infect the firmwareand operating system and are difficult to detect.
What should you do?

A. Use Vulnerability Scanning Service.
B. Create a burstable instance.
C. Use in-transit encryption.
D. Create a shielded instance.

Answer: D

Explanation:
Explanation
The explanation is that shielded instances are VM instances that have additional security features to protect them from low-level threats, such as rootkits and bootkits that can infect the firmware and operating system and are difficult to detect. Shielded instances use verified boot, which ensures that only trusted software components are executed during the boot process. Shielded instances also use virtual trusted platform module (vTPM), which provides a secure storage for encryption keys and certificates. Shielded instances are available for Oracle Linux 8 platform images with VM.Standard2.* shapes.

NEW QUESTION # 39
You have an instance running in Oracle Cloud Infrastructure (OCI) that cannot be live-migrated during an infrastructure maintenance event. OCI schedules a maintenance due date within 14 to 16 days and sends you a notification.
What would happen if you choose not to proactively reboot the instance before the scheduled maintenance due date?

A. You will receive another notification to reboot within the next 14 days.
B. The instance will get terminated.
C. The instance is either reboot-migrated or rebuilt in place for you.
D. You will receive another notification to reboot within the next 7 days.

Answer: C

NEW QUESTION # 40
Company XYZ is spending $300,000.00 USD per month in egress fees for 7 Petabytes that they consume for Outbound Data Transfer in North America with their current cloud provider. The company is seeking to lower that expense considerably without reducing consumption. You propose migration to OCI because the Gigabyte Outbound Data Transfer in North America costs just $0.0085 USD per month. With OCI, how much will they spend per month for 7 Petabytes of Outbound Data Transfer? (1 Petabyte = 1000 Terabytes)

A. $59,500.00
B. $150,000.00
C. $59,415.00
D. $0.00 (free with OCI)

Answer: A

Explanation:
$59,415.00 is the amount that Company XYZ will spend per month for 7 Petabytes of Outbound Data Transfer in North America with OCI. This is calculated by multiplying 7 Petabytes by 1000 Terabytes (to convert Petabytes to Terabytes), then multiplying by $0.0085 USD (the cost per Gigabyte Outbound Data Transfer in North America), then dividing by 1000 (to convert Gigabytes to Terabytes). The formula is:
(7 * 1000 * 0.0085) / 1000 = $59,415.00

NEW QUESTION # 41
A financial firm is designing an application architecture for its online trading platform that should have high availability and fault tolerance.
Their solutions architects configured the application to use an Oracle Cloud Infrastructure (OCI) Object Storage bucket located in the US West (us-phoenix-1) region to store large amounts of financial dat a. The stored financial data in the bucket should not be impacted even if there is an outage in one of the Availability Domains or a complete region.
What should the architect do to avoid any costly service disruptions and ensure data durability?

A. Create a replication policy to send data to a different bucket in another OCI region.
B. Copy the Object Storage bucket to a block volume.
C. Create a lifecycle policy to regularly send data from the Standard to Archive storage.
D. Create a new Object Storage bucket in another region and configure lifecycle policy to move data every 5 days.

Answer: A

Explanation:
Create a replication policy to send data to a different bucket in another OCI region. The explanation is that replication is a feature of Object Storage that allows you to automatically copy objects from one bucket to another bucket, either in the same region or in a different region. Replication can help you improve data availability and durability, as well as meet compliance and disaster recovery requirements. To enable replication, you need to create a replication policy that specifies the source and destination buckets, the replication frequency, and the replication filters. Replication policies are evaluated every five minutes and copy any new or updated objects from the source bucket to the destination bucket.

NEW QUESTION # 42
Which TWO statements about the Oracle Cloud Infrastructure (OCI) File Storage Service are accurate?

A. File systems use Oracle-managed keys by default.
B. Customer can encrypt the communication to a mount target via export options.
C. Mount targets use Oracle-managed keys by default.
D. Customer can encrypt data in their file system using their own Vault encryption key.
E. Communication with file systems in a mount target is encrypted via HTTPS.

Answer: A,D

Explanation:
Explanation
File systems use Oracle-managed keys by default. Customer can encrypt data in their file system using their own Vault encryption key. The explanation is that File Storage Service encrypts all data at rest using AES-256 encryption algorithm. By default, File Storage Service uses Oracle-managed keys to encrypt and decrypt data.
However, you can also use your own Vault encryption key to encrypt data in your file system. To do so, you need to create a key in Vault and associate it with your file system when you create or update it.

NEW QUESTION # 43
Which TWO statements are NOTcorrect regarding the Oracle Cloud Infrastructure (OCI) burstable instances?

A. Baseline utilization is a fraction of each CPU core, either 25% or 75%.
B. Burstable instances cost less than regular instances with the same total OCPU count.
C. If the instance's average CPU utilization over the past 24 hours is below thebaseline, the system allows itto burst above the baseline.
D. Burstable instances are charged according to the baseline OCPU.
E. Burstable instances are designed for scenarios where an instance is not typically idle and has high CPUutilization.

Answer: A,E

Explanation:
Explanation
The explanation is that burstable instances are VM instances that have a baseline utilization of either 12% or 50% of each CPU core, not 25% or 75%. Burstable instances are designed for scenarios where an instance is typically idle or has low CPU utilization but occasionally needs to burst above the baseline to handle spikes in demand. Burstable instances cost less than regular instances with the same total OCPU count but charge extra for bursting above the baseline OCPU.

NEW QUESTION # 44
You are using a custom application with third-party APIs to manage the application and data hosted in an OracleCloud Infrastructure (OCI) tenancy. Although your third-party APIs do not support OCI's signature-based authentication, you want them to communicate with OCI resources. Which authentication option should you useto ensure this?

A. OCI Username and Password
B. Auth Tokens
C. API Signing Key
D. SSH Key Pair with 2048-bit algorithm

Answer: B

Explanation:
Explanation
Auth Tokens is the authentication option that you should use to ensure that your custom application with third-party APIs can communicate with OCI resources. Auth Tokens are tokens that can be used as an alternative to passwords when making API calls to OCI services. Auth Tokens can be generated and revoked by users in the OCI Console or CLI, and can be used with any API client that supports basic authentication.
The other options are not suitable for this scenario, as they either require OCI's signature-based authentication or are not applicable for API calls. References: [Auth Tokens]

NEW QUESTION # 45
You need to set up instance principals so that an application running on aninstance can call Oracle CloudInfrastructure (OCI) public services, without the need to configure user credentials.
A developer in your team has already configured the application built using an OCISDK to authenticate using theinstance principals provider.
Which is NOTa necessary step to complete this set up?

A. Generate Auth Tokens to enable instances in the dynamic group to authenticate with APIs.
B. Create a policy granting permissions to the dynamic group to access services in your compartment or tenancy.
C. Deploy the application and the SDK to all the instances that belong to the dynamic group.
D. Create a dynamic group with matching rules to specify which instances can make API calls against services.

Answer: A

Explanation:
Explanation
Generating Auth Tokens to enable instances in the dynamic group to authenticate with APIs is not a necessary step to complete this set up. This is because Auth Tokens are used to authenticate users, not instances, when making API calls to OCI services. Instance principals are a feature that allows instances to authenticate themselves using certificates, without requiring user credentials or Auth Tokens. The other options are necessary steps to complete this set up, as they enable instances in the dynamic group to make API calls against services using instance principals and IAM policies. References: [Instance Principals], [Auth Tokens]

NEW QUESTION # 46
Which is NOT a valid option for an Oracle Cloud Infrastructure (OCI) compute shape?

A. Exadata Virtual Machine
B. Bare Metal
C. Dedicated Virtual Machine Host
D. Virtual Machine

Answer: A

Explanation:
Exadata Virtual Machine is not a valid option for an OCI compute shape. Exadata Virtual Machine is a deployment option for Exadata Cloud Service or Exadata Cloud@Customer, which are services that provide dedicated Exadata infrastructure for running Oracle databases in OCI. Exadata Virtual Machine allows you to create multiple virtual machines on each Exadata compute node and isolate them from each other using Oracle VM technology. The valid options for OCI compute shapes are:
Bare Metal: A bare metal instance is a physical server that gives you direct access to the underlying hardware and full isolation from other tenants.
Dedicated Virtual Machine Host: A dedicated virtual machine host is a physical server that hosts only your virtual machine instances and no other tenant's instances.
Virtual Machine: A virtual machine instance is a virtual server that runs on a shared physical server with other tenants' instances.
Burstable: A burstable instance is a virtual machine instance that has a baseline utilization of either 12% or 50% of each CPU core and can burst above the baseline when needed.

NEW QUESTION # 47
Which TWO are key benefits of setting up Site-to-Site VPN on Oracle Cloud Infrastructure (OCI)?

A. When setting up Site-to-Site VPN, it creates a private connection that provides consistent network experience.
B. When setting up Site-to-Site VPN, customers can configure it to use static or dynamic routing (BGP).
C. When setting up Site-to-Site VPN, customers can expect bandwidth above 2 Gbps.
D. When setting up Site-to-Site VPN, OCI provisions redundant VPN tunnels.

Answer: B,D

Explanation:
When setting up Site-to-Site VPN, customers can configure it to use static or dynamic routing (BGP). When setting up Site-to-Site VPN, OCI provisions redundant VPN tunnels. The explanation is that Site-to-Site VPN is a secure and encrypted connection between your on-premises network and your Virtual Cloud Network (VCN) in OCI over the public internet. When setting up Site-to-Site VPN, you can choose to use static routing or dynamic routing (Border Gateway Protocol or BGP) to exchange routes between your network and OCI. OCI also provisions two redundant VPN tunnels for each Site-to-Site VPN connection to provide high availability and failover.

NEW QUESTION # 48
Which Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) policy is invalid?

A. Allow dynamic-group FrontEnd to manage instance-family in compartment Project-A
B. Allow group A-Developers to create volumes in compartment Project-A
C. Allow group A-Admins to manage all-resources in compartment Project-A
D. Allow any-user to inspect users in tenancy

Answer: B

Explanation:
Allow group A-Developers to create volumes in compartment Project-A is an invalid IAM policy. This is because create is not a valid verb for volumes. The correct verb for creating volumes is attach. The other options are valid IAM policies that use correct verbs and syntax. Reference: [IAM Policies], [Verbs]

NEW QUESTION # 49
......

Download 1z0-1072-23 Exam Dumps Questions to get 100% Success: https://lead2pass.guidetorrent.com/1z0-1072-23-dumps-questions.html

Practice Test for 1z0-1072-23 Certification Real 2024 Mock Exam [Q25-Q49]

Related Articles