[Oct-2022] Download Real 1Z0-1067-21 Exam Dumps for candidates 100% Free Dump Files [Q24-Q42]

Rate this post

[Oct-2022] Download Real 1Z0-1067-21 Exam Dumps for candidates. 100% Free Dump Files

Prepare Important Exam with 1Z0-1067-21 Exam Dumps(2022)

Oracle 1Z0-1067-21 Exam Syllabus Topics:

Topic	Details
Topic 1	Utilize CASB to remediate security vulnerabilities Leverage compartments for resource isolation
Topic 2	Manage infrastructure as code Utilize configuration management tools to control infrastructure Automating Cloud Tasks
Topic 3	Explain user resource manager processes to implement infrastructure as code Use the OCI CLI to simplify repetetive tasks
Topic 4	Create secure access control policies Implement automated notifications Understand Metric Query Language (MQL)
Topic 5	Leverage automation to control cost Utilize billing tags to track cost Explain how to Implement billing alerts
Topic 6	Explain Troubleshooting resource availability and accessability Validate OCI performance Performance Tuning and Troubleshooting

NEW QUESTION 24
You have recently been asked to take over management of your company’s infrastructure provisioning efforts, utilizing Terraform v0.12 to provision and manage infrastructure resources in Oracle Cloud Infrastructure (OCI). For the past few days the development environments have been failing to provision. Terraform returns the following error:

You locate the related code block in the Terraform config and find the following:

Which correction should you make to solve this issue? (Choose the best answer.)

Place a command at the end of line 16

Modify line 15 to be the following:
tcp_options = {min = “22”, max = “22”)

Modify line 15 to be the following:
tcp_options { min = “22”
max = “22”
}

Replace the curly braces ‘{ }’ in lines 11 and 16 with square braces ‘[ ]’

NEW QUESTION 25
You have been contracted by a local e-commerce company to assist with enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet, and a database in a separate, private subnet.
The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically.
After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)

Create a load balancer policy in the Traffic Management service. Configure one answer for each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.

Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A record. Inform customers to prepend the website URL with failover if the primary site is unavailable.

Create a failover policy in the Traffic Management service. Set the IP address of the public load balancer for the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.

Deploy a new load balancer in the primary region. Create one backend set for the primary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.

NEW QUESTION 26
You have a web application running on Oracle Cloud Infrastructure (OCI) that lets users log in with a username and password. You notice that an attacker has tried to use SQL comment “–” to alter the database query, remove the password check and log in as a user. You decide to prevent any future attacks.
Which of the following OCI services or features would you choose to safeguard your application? (Choose the best answer.)

Network Security Group

Data Safe

Web Application Framework (WAF)

Vault

NEW QUESTION 27
You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively.
You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us-phoenix-1 region only and not any other OCI regions.
What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.)

Allow group PHX-Admins to manage all-resources in tenancy where request.region= ‘phx’

Allow group PHX-Admins to manage all-resources in tenancy where request.permission= ‘phx’

Allow group PHX-Admins to manage all-resources in tenancy where request.target= ‘phx’

Allow group PHX-Admins to manage all-resources in tenancy where request.location= ‘phx’

NEW QUESTION 28
You have recently joined a startup company and quickly find that nobody is tracking the amount of money spent on Oracle Cloud Infrastructure (OCI). Seeing an opportunity to help save money you begin creating a solution to better track the cost of resources provisioned by each individual on the team.
Which option allows you to identify excessive spend across all resources in your tenancy? (Choose the best answer.)

Use the Python SDK to write a custom application that will monitor the Audit log. Look for CREATE events and configure the application to send you an email each time a new resource is created.

Create a tag namespace named BILLING with a Tag Key named CostCenter. Tag each of your resources with this Tag Key and the correct value.

Use the Events Service and create rules that will act when a new Object Storage bucket or Compute Instance has been created. Have the rule email you each time one of these events occurs.

Create a budget for each compartment that will send a notification when monthly spend reaches a pre- defined amount.

NEW QUESTION 29
Your application is using an Object Storage bucket named app-data in the namespace vision, to store both persistent and temporary dat a. Every week all the temporary data should be deleted to limit the storage consumption.
Currently you need to navigate to the Object Storage page using the web console, select the appropriate bucket to view all the objects and delete the temporary ones.
To simplify the task you have configured the application to save all the temporary data with /temp prefix. You have also decided to use the Command Line Interface (CLI) to perform this operation.
What is the command you should use to speed up the data cleanup? (Choose the best answer.)

oci os object delete -ns vision -bn app-data –prefix /temp

oci os object bulk-delete -ns vision -bn app-data –prefix /temp –force

oci objectstorage bulk-delete -ns vision -bn app-data –prefix /temp –force

oci os object delete app-data in vision where prefix = /temp

NEW QUESTION 30
You have recently been asked to take over management of your company’s infrastructure provisioning efforts, utilizing Terraform v0.12 to provision and manage infrastructure resources in Oracle Cloud Infrastructure (OCI).
For the past few days the development environments have been failing to provision. Terraform returns the following error:

You locate the related code block in the Terraform config and find the following:

Which correction should you make to solve this issue? (Choose the best answer.)

Place a command at the end of line 16

Modify line 15 to be the following:
tcp_options = {min = “22”, max = “22”)

Modify line 15 to be the following:
tcp_options {
min = “22”
max = “22”
}

Replace the curly braces ‘{ }’ in lines 11 and 16 with square braces ‘[ ]’

NEW QUESTION 31
You have been asked to investigate a potential security risk on your company’s Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking through the audit logs for suspicious activity.
How can you retrieve the audit logs using the OCI Command Line Interface (CLI)? (Choose the best answer.) oci audit event list –end-time $end-time –compartment-id $compartment-id

oci audit event list –start-time $start-time –compartment-id $compartment-id

oci audit event list –start-time $start-time –end-time $end-time —

compartment-id $compartment-id
oci audit event list –start-time $start-time –end-time $end-time –tenancy-

id $tenancy-id

NEW QUESTION 32
You are using the Oracle Cloud Infrastructure Command Line Interface to launch a Linux virtual machine. You enter the following command (with correct values for all parameters):

The command fails.
Which is NOT a valid parameter in this command? (Choose the best answer.)

-t <tenancy_id>

– -image-id <image_id>

– -shape “<shape_name>”

-c <compartment_id>

– -subnet-id <subnet_id>

NEW QUESTION 33
You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:

You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet.
Which action would you take to accomplish the task? (Choose the best answer.)

Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the public subnet that hosts the company website.

In default security list, add a stateful rule to allow ingress access on port 443.

Create a new security list with a stateful rule to allow ingress access on port 443 and associate it to the public subnet.

Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the instance that hosts the company website.

NEW QUESTION 34
Your deployment platform within Oracle Cloud Infrastructure (OCI) leverages a compute instance with multiple block volumes attached. There are multiple teams that use the same compute instance and have access to these block volumes. You want to ensure that no one accidentally deletes any of these block volumes. You have started to construct the following IAM policy but need to determine which permissions should be used.
allow group DeploymentUsers to manage volume-family where ANY
{ request.permission != <???>, request.permission != <???>, request.permission !=
<???> }
Which permissions can you use in place of <???> in this policy? (Choose the best answer.)

VOLUME_DELETE, VOLUME_ATTACHMENT_DELETE, VOLUME_BACKUP_DELETE

VOLUME_ERASE, VOLUME_ATTACHMENT_ERASE, VOLUME_BACKUP_ERASE

ERASE_VOLUME, ERASE_VOLUME_ATTACHMENT, ERASE_VOLUME_BACKUP

DELETE_VOLUME, DELETE_VOLUME_ATTACHMENT, DELETE_VOLUME_BACKUP

NEW QUESTION 35
Your company has restructured its HR departments. As part of this change, you also need to re-organize compartments within Oracle Cloud Infrastructure (OCI) to align them to the company’s new organizational structure. The following change is required:

Compartment Team_x needs to be moved under a new parent compartment, Project_B The tenancy has the following policies defined for compartments Project_A and Project_B: Policy1: Allow group G1 to manage instance-family in compartment HR:Project_A Policy2: Allow group G2 to manage instance-family in compartment HR:Project_B Which two statements describe the impacts after the compartment Team_x is moved? (Choose two.)

Group G2 can now manage instance-families in compartment Project_B and compartment Team_X

Group G1 can now manage instance-families in compartment Project_A, compartment Project_B and compartment Team_X

Group G1 can now manage instance-families in compartment Project_A but not in compartment Team_x

Group G2 can now manage instance-families in compartment Project_A but not in compartment Team_x

Group G2 can now manage instance-families in compartment Project_B, compartment Project_A and compartment Team_X

NEW QUESTION 36
Which statement about Oracle Cloud Infrastructure paravirtualized block volume attachments is TRUE?
(Choose the best answer.)

Paravirtualized volumes may reduce the maximum IOPS performance for larger block volumes.

Paravirtualized is required to manage iSCSI configuration for virtual machine instances.

Paravirtualized volumes become immediately available on bare metal compute instances.

Paravirtualization utilizes the internal storage stack of compute instance OS and network hardware virtualization to access block volumes.

NEW QUESTION 37
What is a key benefit of using Oracle Cloud Infrastructure’s Resource Manager for your Terraform provisioning and management activities? (Choose the best answer.)

You can use Resource Manager to apply patches to all existing Oracle Linux interfaces in a specified compartment.

Resource Manager has administrative privileges by design. Even if your IAM user does not have access, you can leverage Resource Manager to provision new resources to any compartment in the Tenancy.

You can use Resource Manager to identify and maintain an inventory of all Compute and Database instances across your tenancy.

Resource Manager manages to Terraform state file for your infrastructure and locks the file so that only one job at a time can run on a given stack.

NEW QUESTION 38
You are working as a Cloud Operations Administrator for your company. They have different Oracle Cloud Infrastructure (OCI) tenancies for development and production workloads. Each tenancy has resources in two regions – uk-london-1 and eu-frankfurt-1. You are asked to manage all resources and to automate all the tasks using OCI Command Line Interface (CLI).
Which is the most efficient method to manage multiple environments using OCI CLI? (Choose the best answer.)

Use OCI CLI profiles to create multiple sets of credentials in your config file, and reference the appropriate profile at runtime.

Create environment variables for the sets of credentials that align to each combination of tenancy, region, and environment.

Run oci setup config to create new credentials for each environment every time you want to access the environment.

Use different bash terminals for each environment.

NEW QUESTION 39
You have the following compartment structure within your company’s Oracle Cloud Infrastructure (OCI) tenancy:

You want to create a policy in the root compartment to allow SystemAdmins to manage VCNs only in CompartmentC.
Which policy is correct? (Choose the best answer.)

Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentB:CompartmentC

Allow group SystemAdmins to manage virtual-network-family in compartment Root

Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentA:CompartmentB:CompartmentC

Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentC

NEW QUESTION 40
Your company recently adopted a hybrid cloud architecture which requires them to migrate some of their on- premises web applications to Oracle Cloud Infrastructure (OCI). You created a Terraform template which automatically provisions OCI resources such as compute instances, load balancer, and a database instance. After running the stack using the terraform apply command, it successfully launched the compute instances and the load balancer, but it failed to create a new database instance with the following error:
Service error: NotAuthorizedOrNotFound. shape VM.Standard2.4 not found. http status code: 404 You discovered that the resource quotas assigned to your compartment prevent you from using VM.Standard2.4 instance shapes available in your tenancy. You edit the Terraform script and replace the shape with VM.Standard2.2 Which option would you recommend to re-run the terraform command to have required OCI resources provisioned with the least effort? (Choose the best answer.)

terraform plan -target=oci_database_db_system.db_system

terraform apply -auto-approve

terraform refresh -target=oci_database_db_system.db_system

terraform apply -target=oci_database_db_system.db_system

NEW QUESTION 41
You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG: NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:

However, after checking the bastion host logs, you discovered that there are IP addresses other than your own that can access your bastion host.
What is the root cause of this issue? (Choose the best answer.)

The Security List allows access to all IP address which overrides the Network Security Group ingress rules.

All compute instances associated with NSG-050504 are also able to connect to the bastion host.

The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.

A netmask of /32 allows all IP address in the 140.19.2.0 network, other than your IP 140.19.2.140

NEW QUESTION 42
One of the compute instances that you have deployed on Oracle Cloud Infrastructure (OCI) is malfunctioning. You have created a console connection to remotely troubleshoot it.
Which two statements about console connections are TRUE? (Choose two.)

It is not possible to use VNC console connections to connect to Bare Metal Instances.

VNC console connection uses SSH port forwarding to create a secure connection from your local system to the VNC server attached to your instance’s console.

It is not possible to connect to the serial console to an instance running Microsoft Windows, however VNC console connection can be used.

For security purpose, the console connection will not let you edit system configuration files.

If you do not disconnect from the session, your serial console connection will automatically be terminated after 24 hours.