2021 Realistic 1Z0-1072-20 Dumps Latest Oracle Practice Tests Dumps
1Z0-1072-20 Dumps PDF - 1Z0-1072-20 Real Exam Questions Answers
NEW QUESTION 90
Which two components cannot be deleted in your Oracle Cloud Infrastructure Virtual Cloud Network? (Choose two.)
- A. Default route table
- B. Service gateway
- C. Default security list
- D. Routing gateway
- E. Default subnet
Answer: A,C
Explanation:
Reference:
https://www.oracle.com/a/ocom/docs/vcn-deployment-guide.pdf (4)
NEW QUESTION 91
As a solution architect, you designed the network infrastructure of a three-tier web application on Oracle Cloud Infrastructure (OCI) and the back-end database servers are put in a private subnet. One of your database administrators requests to have private access to OCI object storage service.
How should you fulfill this request?
- A. Create a service gateway, add a new route rule to the private subnet route table that uses object storage as target type.
- B. Attach a public IP address to the instances in the private subnet, and then add a new route rule to the private subnet route table to route default traffic to the internet gateway.
- C. Create a dynamic routing gateway (DRG) and attach it to your virtual cloud network (VCN). Add a default route rule to the private subnets route table and set the target as DRG.
- D. Add a new route rule to the private subnet route table to route default traffic to the internet gateway.
Answer: A
Explanation:
Explanation/Reference: https://blogs.oracle.com/cloud-infrastructure/connect-private-instances-with-oracle-services- through-an-oracle-cloud-infrastructure-service-gateway
NEW QUESTION 92
A financial firm is designing an application architecture for its online trading platform that must have high availability and fault tolerance.
Their solutions architect configured the application to use an Oracle Cloud Infrastructure Object Storage bucket located in the US West (us-phoenix-1) region to store large amounts of financial dat a. The stored financial data in the bucket must not be affected even if there is an outage in one of the Availability Domains or a complete region.
What should the architect do to avoid any costly service disruptions and ensure data durability?
- A. Create a lifecycle policy to regularly send data from Standard to Archive storage.
- B. Create a new Object Storage bucket in another region and configure lifecycle policy to move data every 5 days.
- C. Create a replication policy to send data to a different bucket in another OCI region.
- D. Copy the Object Storage bucket to a block volume.
Answer: B
NEW QUESTION 93
You are a network architect and have designed the network infrastructure of a three-tier application on Oracle Cloud Infrastructure (OCI). In the architecture, back-end DB servers are in a private subnet. One of your DB administrators requests to have access to OCI object storage service.
How can you meet this requirement?
- A. Create a dynamic routing gateway (DRG) and attach it your virtual cloud network (VCN). Add a default route rule to the private subnets route table and set the target as DRG
- B. Add a new route rule to the private subnet route table to route default traffic to the internet gateway
- C. Create a service gateway, add a new route rule to the private subnet route table that uses storage as your service gateway target type
- D. Attach a public IP address to the instances in the private subnet, and then add a new route rule to the private subnet route table to route default traffic to the internet gateway
Answer: C
Explanation:
Explanation
A service gateway lets resources in your VCN privately access specific Oracle services, without exposing the data to an internet gateway or NAT. The resources in the VCN can be in a private subnet and use only private IP addresses. The traffic from the VCN to the service of interest travels over the Oracle network fabric and never traverses the internet.
To give your VCN access to a given service CIDR label, you must enable that service CIDR label for the VCN's service gateway. You can do that when you create the service gateway, or later after it's created. You can also disable a service CIDR label for the service gateway at any time.
For traffic to be routed from a subnet in your VCN to a service gateway, you must add a rule accordingly to the subnet's route table. The rule must use the service gateway as the target.
NEW QUESTION 94
With regard to Oracle Cloud Infrastructure Load Balancing service, which two actions will occur when a backend server that is registered with a backend set is marked to drain connections? (Choose two.)
- A. All new connections to this backend server are disallowed.
- B. Connections to this backend server will remain open until all in-flight requests are completed.
- C. Requests to this backend server are redirected to a user-defined error page.
- D. All existing connections to this backend sever will be immediately closed.
- E. All connections to this backend server are forcibly closed after a timeout period.
Answer: A,B
Explanation:
Explanation
Explanation/Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Balance/Reference/sessionpersistence.htm
NEW QUESTION 95
Your customer is using an Oracle Cloud Infrastructure (OCI) compartment named Production that hosts several resources such as compute instances, DB Systems and File Systems. Each resource in the Production compartment is tagged.
The customer's security team wants to restrict access to DB Systems to only the authorized group of DBAs.
Which OCI Tagging capability can be used to meet this requirement?
- A. Cost-Tracking Tags
- B. Tag-based Access Control
- C. Tags Defaults with predefined values
- D. Tag Defaults
Answer: B
Explanation:
Explanation/Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Tagging/Tasks/ managingaccesswithtags.htm#about
NEW QUESTION 96
What happens when you run terraform plan?
- A. It deletes all existing resources and re-creates them.
- B. It shows a dependency graph.
- C. It configures, reconfigures, and instantiates resources and their dependencies.
- D. It shows the operator the course of action that would be taken if a change is applied.
Answer: D
Explanation:
Explanation
References:
The terraform plan command is used to create an execution plan. Terraform performs a refresh, unless explicitly disabled, and then determines what actions are necessary to achieve the desired state specified in the configuration files.
This command is a convenient way to check whether the execution plan for a set of changes matches your expectations without making any changes to real resources or to the state. For example, terraform plan might be run before committing a change to version control, to create confidence that it will behave as expected.
NEW QUESTION 97
You created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains a DB System. The application requires a shared file system so you have provisioned one using the file storage service (FSS).
You also created the corresponding mount target in one of the application subnets. The VCN security lists are properly configured so that both application servers and the DB system can access the file system. The security team determines that the DB System should have read-only access to the file system.
What change should you make to satisfy this requirement?
- A. Connect via SSH to one of the application servers where the file system has been mounted. Use the Unix command chmod to change permissions on the file system directory, allowing the database user read only access.
- B. Create an instance principal for the DB System. Write an Identity and Access Management (IAM) policy that allows the instance principal read-only access to the file storage service.
- C. Modify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateless.
- D. Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet.
Answer: D
NEW QUESTION 98
Which two options are true for Autonomous Transaction Processing (ATP) database? (Choose two.)
- A. You can add more Pluggable Database for consolidating multiple databases in ATP
- B. You can scale CPU up or down in ATP
- C. You can scale storage up or down in ATP
- D. You can add new ORACLE_HOME for bringing older versions of on-premises databases to ATP
- E. You can add/remove Diskgroup in ATP
Answer: B,C
Explanation:
Explanation
You can scale up/down your Autonomous Database to scale both in terms of compute and storage only when needed, allows people to pay per use.
Oracle allows you to scale compute and storage independently, no need to do it together. these scaling activities fully online (no downtime required) in Details page Autonomous Database click Scale Up/Down. Click on arrow to select a value for CPU Core Count or Storage (TB).
Or Select auto scaling to allow the system to automatically use up to three times more CPU and IO resources to meet workload demand, compared to the database operating with auto scaling disabled.
NEW QUESTION 99
Which two methods are supported for migrating your on-premises Oracle database to an Oracle Autonomous Transaction Processing (ATP) database in Oracle Cloud Infrastructure? (Choose two.)
- A. Use database backup and restore.
- B. Use Oracle Data Pump.
- C. Load text files into ATP using SQL Developer.
- D. Use RMAN duplicate.
- E. Transfer the physical database files and re-create the database.
Answer: B,E
Explanation:
Explanation/Reference: https://docs.oracle.com/en/solutions/migrate-to-atp/index.html#GUID-28E5A683-6DC6-4A07- BB1C-55F020D4C1CD
NEW QUESTION 100
Which two statements are true about adding secondary VNICs to an existing compute instance? (Choose two.)
- A. The primary and secondary VNIC association must be in the same availability domain
- B. You can assign an Ephemeral Public IP to a secondary VNIC
- C. The primary and secondary VNIC association can be in different virtual cloud networks (VCNs)
- D. You can remove the primary VNIC after the secondary VNIC's attachment is complete
Answer: A,C
Explanation:
Explanation
"You can add secondary VNICs to an instance after it's launched. Each secondary VNIC can be in a subnet in the same VCN as the primary VNIC, or in a different subnet that is either in the same VCN or a different one. However, all the VNICs must be in the same availability domain as the instance."
https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/managingVNICs.htm
NEW QUESTION 101
Which three are default Virtual Cloud Network (VCN) components? (Choose three.)
- A. DHCP options
- B. Dynamic Routing Gateway
- C. Route Table
- D. Internet Gateway
- E. Security List
Answer: A,C,E
Explanation:
Explanation
References:
(1) => Populated by Default(0) => Not Populated by Default
Resources==========Subnets (0)Route Tables (1)Internet Gateways (0)Dynamic Routing Gateways (0)Network Security Groups (0)Security Lists (1)DHCP Options (1)Local Peering Gateways (0)NAT Gateways (0)Service Gateways (0)
NEW QUESTION 102
Which statement is true about Oracle Cloud Identifiers (OCID)?
- A. mytenancy.oc.ocid is a valid OCID.
- B. If you delete a user, and them create a new user with the same name, the user will be considered a different user because of different OCIDs.
- C. Users can customize OCIDs for all the resources in their compartments.
- D. If you delete a user, and then create a new user with the same name, the new user will be assigned the exact same OCIDs as the system remembers.
Answer: B
Explanation:
References:
NEW QUESTION 103
Which statement is true about interconnecting Virtual Cloud Network (VCN)?
- A. Peering VCNs should not have overlapping CIDR blocks.
- B. VCNs must be in the same tenancy to be peered.
- C. VCNs support transitive peering.
- D. The only way to interconnect VCNs is through peering.
Answer: A
Explanation:
Reference:
https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/remoteVCNpeering.htm (note)
NEW QUESTION 104
You are in the process of setting up a highly available student registration website on Oracle Cloud Infrastructure (OCI). You use a load balancer and a database service on OCI. You launch two compute instances each in a different subnet and add them to the back end set of a public load balancer. The load balancer is configured correctly and working. You then deploy the student registration application on these two compute instances. The application can communicate with the database service. However, when you type the URL of this student registration application in your browser, no web page appears.
What could be the cause?
- A. The Dynamic Routing Gateway is preventing the client traffic from your data center network from reaching the public IP of the load balancer.
- B. The security lists of the subnets on which the two instances are located do not have "allow" rules for port 80 and 443.
- C. The load balancer performed a health check on the application and found that compute instances were not in a healthy state and terminated the instances.
- D. The client requested https access to the application and the load balancer service does not support end-to-end SSL from the client to the listener to the back-end set.
Answer: B
NEW QUESTION 105
Your company decided to move a few applications to Oracle Cloud Infrastructure (OCI) in the US West (us-phoenix-1) region.
You need to design a cloud-based disaster recovery (DR) solution with a requirement to deploy the DR resources in the US East (us-ashburn-1) region to minimize network latency.
What is the recommended deployment?
- A. Deploy production and DR applications in two separate VCNs in different availability domains (ADs) within the primary region, and then use a VCN remote peering connection for connectivity.
- B. Deploy production and DR applications in two separate VCNs, each in different regions. Connect them using a VCN remote peering connection.
- C. Deploy production and DR applications in two separate virtual cloud networks (VCNs), each in different regions, and then use VCN local peering gateways for connectivity.
- D. Deploy production and DR applications in the same VCN. Create production subnets in one AD, and DR subnets in another AD (assume a multi-AD region).
Answer: C
Explanation:
Remote VCN peering is the process of connecting two VCNs in different regions The peering allows the VCNs' resources to communicate using private IP addresses without routing the traffic over the internet or through your on-premises network.
NEW QUESTION 106
Which statement is true about cloning a volume?
- A. You need to detach a volume before cloning from it.
- B. You can create a clone for a volume across regions.
- C. You can change the block volume size when cloning a volume.
- D. A cloned volume is the same as a snapshot that has a dependency on the source volume.
Answer: C
Explanation:
Explanation
References:
https://docs.cloud.oracle.com/iaas/Content/Block/Tasks/cloningavolume.htm?tocpath=Services%7CBlock%20V
NEW QUESTION 107
You have provisioned an Autonomous Data Warehouse (ADW) database with 16 enabled OCPUs and need to configure the consumer group for your application.
Which two are true when deciding the number of sessions for each application? (Choose two.)
- A. The HIGH consumer group can run up to 16 concurrent SQL statements as long as MEDIUM and LOW consumer groups have 0 SQL statements
- B. The HIGH consumer group can run 3 concurrent SQL statements when MEDIUM consumer group has
0 SQL statements - C. The MEDIUM and LOW consumer group can run up to 16 concurrent SQL statements if HIGH consumer group has 0 SQL statements
- D. The MEDIUM consumer group can run 20 concurrent SQL statements when HIGH consumer group has
0 SQL statements - E. The HIGH consumer group can run up to 16 concurrent SQL statements in addition to 32 concurrent SQL statements in MEDIUM and LOW consumer group each
Answer: B,D
Explanation:
Explanation
References:
https://docs.oracle.com/en/cloud/paas/autonomous-data-warehouse-cloud/user/connect-predefined.html#GUID-9
NEW QUESTION 108
Which two statements are true about encryption on Oracle Cloud Infrastructure (OCI)? (Choose two.)
- A. By default, object storage and block storage are encrypted at rest.
- B. By default, DB Systems offers an encrypted database.
- C. A customer is responsible for data encryption in all services of OCI.
- D. By default, NVMe drives are encrypted but the block volume service is not.
Answer: A,B
Explanation:
Explanation
References: https://cloud.oracle.com/storage/object-storage/features
NEW QUESTION 109
Which two statements are true about the Oracle Cloud Infrastructure Object Storage Service? (Choose two.)
- A. Data is stored redundantly only in a single AD.
- B. It provides strong consistency.
- C. It can be directly attached or detached from a compute instance.
- D. It provides higher IOPS than Block Storage.
- E. Data is stored redundantly across multiple availability domains (ADs) in a multi-AD region.
Answer: B,E
Explanation:
STRONG CONSISTENCY When a read request is made, Object Storage always serves the most recent copy of the data that was written to the system. DURABILITY Object Storage is a regional service. Data is stored redundantly across multiple storage servers. Object Storage actively monitors data integrity using checksums and automatically detects and repairs corrupt data. Object Storage actively monitors and ensures data redundancy. If a redundancy loss is detected, Object Storage automatically creates more data copies. For more details about Object Storage durability, see the Oracle Cloud Infrastructure Object Storage FAQ. CUSTOM METADATA You can define your own extensive metadata as key-value pairs for any purpose. For example, you can create descriptive tags for objects, retrieve those tags, and sort through the data. You can assign custom metadata to objects and buckets using the Oracle Cloud Infrastructure CLI or SDK. See Software Development Kits and Command Line Interface for details. ENCRYPTION Object Storage employs 256-bit Advanced Encryption Standard (AES-256) to encrypt object data on the server. Each object is encrypted with its own key. Data encryption keys are encrypted with a master encryption key that is frequently rotated. Encryption is enabled by default and cannot be turned off.
NEW QUESTION 110
Which deployment architecture is offered when you deploy the Platform Service Manager based Database Cloud Service (DBCS) onto Oracle Cloud Infrastructure?
- A. Two node Primary RAC database leveraging ACFS for the shared file system
- B. Single Instance database with a Single Instance Data Guard in Maximum Protection mode
- C. Single Instance database with a Single Instance Data Guard in Maximum Performance mode
- D. Two node Primary RAC database with a two node RAC Data Guard Standby in Maximum Performance mode
Answer: D
NEW QUESTION 111
You have one database-style application that frequently makes many random reads and writes across the dataset.
Which storage offering supports this application?
- A. File Storage Service
- B. Archive Storage Service
- C. Object Storage Service
- D. Block Storage Service
Answer: D
NEW QUESTION 112
Which two statements about Oracle Cloud Infrastructure File Storage Service are accurate? (Choose two.)
- A. Customer can encrypt data in their file system using their own Vault encryption key.
- B. Communication with file systems in a mount target is encrypted via HTTPS.
- C. Customer can encrypt the communication to a mount target via export options.
- D. File systems use Oracle-managed keys by default.
- E. Mount targets use Oracle-managed keys by default.
Answer: A,E
Explanation:
Explanation/Reference:
Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/File/Concepts/filestorageoverview.htm
NEW QUESTION 113
......
1Z0-1072-20 Premium Exam Engine pdf Download: https://www.braindumpquiz.com/1Z0-1072-20-exam-material.html