[Nov-2023] Updated and Accurate 1z0-1072-23 Questions & Answers for passing the exam Quickly [Q22-Q38]

Rate this post

[Nov-2023] Updated and Accurate 1z0-1072-23 Questions & Answers for passing the exam Quickly

Download Real 1z0-1072-23 Exam Dumps for candidates. 100% Free Dump Files

Oracle 1z0-1072-23 Exam Syllabus Topics:

Topic	Details
Topic 1	Configure and manage Object Storage Understand File System usage and metering
Topic 2	Configure Security Lists and Network Security Groups Describe and configure OS Management
Topic 3	Describe Public and Private DNS zones Configure Cloud Guard, Security Zone, and Security Advisor
Topic 4	Describe OCI compute image options Configure DNS and Traffic Management
Topic 5	Configure Virtual Cloud Network Routing and Gateways Describe and configure a layer-7 Load Balancer
Topic 6	Configure Volume Groups, Backups, Clones Implement conditional and advanced policies
Topic 7	Understand Observability and Management platform Configure Dynamic Groups and Tag based access control
Topic 8	Understand File System Snapshots and Cloning Describe and Configure Web Application Firewall and Certificates
Topic 9	Understand Block Volume performance tiers Understand Object Storage replication

Q22. You are a system administrator of your company and you are managing a complex environment consisting of compute instances running Oracle Linux on Oracle Cloud Infrastructure (OCI). It’s your task to apply all the latest kernel security updates to all instances.
Which OCI service will allow you to complete this task?

OCI Streaming service

OS Management service

OCI Registry

OCI Security Zones to achieve automatic security updates

OCI Cloud Guard to monitor and install the security updates

Q23. When creating an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) with the VCN wizard, which THREE gateways are created automatically?

Internet Gateway

Local Peering Gateway

Dynamic Routing Gateway

NAT Gateway

Storage Gateway

Bastion Host

Service Gateway

Q24. Which of the following statements is true about cloning a volume in the Oracle Cloud Infrastructure (OCI) Block Volume service?

You need to detach a volume before cloning it.

Creating a clone takes longer than creating a backup of a volume.

You can clone a volume to another region.

You can change the block volume size when cloning a volume.

Q25. Which is NOT a valid Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) approach?

Ensure VCN CIDR prefix overlaps with other VCNs in your tenancy or with your organizations private IP network ranges.

Ensure not all IP addresses are allocated at once within a VCN or subnet; instead reserve some IP addresses for future use.

Private subnets should ideally have individual route tables to control the flow of traffic within and outside of VCN.

Use OCI tags to tag VCN resources so that all resources follow organizational tagging/naming conventions.

Q26. Which TWO are key benefits of setting up Site-to-Site VPN on Oracle Cloud Infrastructure (OCI)?

When setting up Site-to-Site VPN, it creates a private connection that provides consistent network experience.

When setting up Site-to-Site VPN, customers can configure it to use static or dynamic routing (BGP).

When setting up Site-to-Site VPN, OCI provisions redundant VPN tunnels.

When setting up Site-to-Site VPN, customers can expect bandwidth above 2 Gbps.

Q27. You want a full-featured Identity-as-a-Service (IDaaS) solution that helps you manage workforce authentication and access to all of your Oracle and non-Oracle applications, whether they are SaaS apps, on-premises enterprise apps, or apps that are hosted in the cloud. Which IAM Identity Domain type should you create?

Free

Oracle Apps Premium

Premium

External User

Q28. You have objects stored in an OCI Object Storage bucket that you want to share with a partner company. You decide to use pre-authenticated requests to grant access to the objects. Which statement is true about preauthenticated requests?

You cannot edit a pre-authenticated request.

Deleting a pre-authenticated request does not revoke user access to the associated bucket or object.

You need to provide your OCI credentials to the partner company.

Pre-authenticated requests can be used to delete buckets or objects.

Q29. You are using the Oracle Cloud Infrastructure (OCI) Vault service to create and manage Secrets. For your databasepassword, you have created a secret and rotated the secret one time. The secret versions are as follows:
Version Number | Status
—————————————–
2 (latest) | Current
1 | Previous
You later realize that you have made a mistake in updating the secret content for version 2 and want to rollback to version 1.
What should you do to rollback to version 1?

Deprecate version 2 (latest). Create new Secret version 3. Create soft link from version 3 to version 1.

Create a new secret version 3 and set to Pending. Copy the content of version 1 into version 3.

From the version 2 (latest) menu, select “Rollback” and select version 1 when given the option.

From the version 1 menu on the OCI console, select “Promote to Current”.

Q30. You have three compartments: ProjectA, ProjectB, and ProjectC. For each compartment, there is an admin groupset up: A-Admins, B-Admins, and C-Admins.
Each admin group has full access over their respective compartments as shown in the graphic below.
Your organization has set up a tag namespace, EmployeeGroup.Role and all your admin groups are tagged with a value of ‘Admin’.

You want to set up a Test compartment for members of the three projects to share. You also need to provideadmin access to all three of your existing admin groups.
Which policy would you write to accomplish this task?

Allow all-group to manage all-resources in compartment Test where
request.principal.group.tag.EmployeeGroup.Role=’Admin’

Allow dynamic-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role=’Admin’

Allow group any-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role=’Admin’

Allow any-user to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role=’Admin’

Q31. You want to create a policy to allow the NetworkAdmins group to manage Virtual Cloud Network (VCN) in compartment C. You want to attach this policy to the tenancy. The compartment hierarchy is shown below.

Which policy statement can be used to accomplish this task?

Allow group NetworkAdmins to manage virtual-network-family in compartment B:C

Allow group NetworkAdmins to manage virtual-network-family in compartment C

Allow group NetworkAdmins to manage virtual-network-family in tenancy

Allow group NetworkAdmins to manage virtual-network-family in compartment A:B:C

Q32. You want to distribute DNS traffic to different endpoints based on the location of the end user. Which Traffic Management Steering Policy would you use?

IP Prefix

Load Balancer

Geolocation

Failover

Q33. You have an instance running in Oracle Cloud Infrastructure (OCI) that cannot be live-migrated during an infrastructure maintenance event. OCI schedules a maintenance due date within 14 to 16 days and sends you a notification.
What would happen if you choose not to proactively reboot the instance before the scheduled maintenance due date?

The instance will get terminated.

The instance is either reboot-migrated or rebuilt in place for you.

You will receive another notification to reboot within the next 14 days.

You will receive another notification to reboot within the next 7 days.

Q34. Which of the following statements is true about cloning a volume in the Oracle Cloud Infrastructure (OCI) BlockVolume service?

You need to detach a volume before cloning it.

Creating a clone takes longer than creating a backup of a volume.

You can clone a volume to another region.

You can change the block volume size when cloning a volume.

Q35. As a network architect you have deployed a public subnet on your Virtual Cloud Network (VCN) with this security list:

You have also created a network security group (NSG) as shown in the table here, and assigned it to your bastion host:

You have confirmed that routing is correct but when you SSH to the VM from your home over the Internet you are unable to connect.
What could be the problem?

User will be able to SSH to the VM from the Internet as SSH is open on the NSG.

Public subnet does not have a route rule to the Internet Gateway.

Internet traffic should be allowed only on the NSG.

SSH traffic is not allowed in the security list nor on the NSG from the Internet.

Q36. You are responsible for creating and maintaining an enterprise application that consists of multiple storage volumes across multiple compute instances in Oracle Cloud Infrastructure (OCI).
The storage volumes include boot volumes and block volumes for your data storage. You need to create a backupfor the boot volumes that will be done daily and a backup for the block volumes that will be done every six hours.
How can you meet this requirement?

Create clones of all boot volumes and block volumes one at a time.

Group the boot volumes into a volume group and create a custom backup policy. Group the block volumesand create a custom backup policy.

Create on-demand full backups of block volumes, and create custom images from the boot volumes. Use afunction to run at a specific time to start the backup process.

Group multiple storage volumes in a volume group and create volume group backups.

Q37. In which TWO ways does Cloud Guard help improve the overall security posture for your tenancy?

Monitors unauthorized or suspicious user activity.

Allows you to centrally manage encryption keys.

Prevents you from creating misconfigurations on your resources in Oracle Cloud Infrastructure (OCI).

Masks sensitive data and monitors security controls on your Oracle databases.

Helps detect misconfigured resources, such as publicly accessible Object Storage buckets, instances, and restricted ports on security lists.

Q38. You have an instance running in Oracle Cloud Infrastructure (OCI) that cannot be live-migrated during an infrastructure maintenance event. OCI schedules a maintenance due date within14 to 16 days and sends you anotification.
What would happen if you choose not to proactively reboot the instance beforethe scheduled maintenance duedate?

The instance will get terminated.

The instance is either reboot-migrated or rebuilt in place for you.

You will receive another notification to reboot within the next 14 days.

You will receive another notification to reboot within the next 7 days.

Prepare Important Exam with 1z0-1072-23 Exam Dumps: https://www.real4dumps.com/1z0-1072-23_examcollection.html

[Nov-2023] Updated and Accurate 1z0-1072-23 Questions & Answers for passing the exam Quickly [Q22-Q38]

Oracle 1z0-1072-23 Exam Syllabus Topics:

Leave a Reply Cancel reply

Related Posts

View All 1z0-1053-22 Actual Exam Questions Answers and Explanations for Free May-2023 [Q34-Q52]

[2022] Pass 1Z0-931-21 Exam – Real Questions & Answers [Q51-Q68]

Oracle 1z0-1032-22 Exam Preparation Guide and PDF Download [Q41-Q56]