2024 Updated Verified 1z0-1067-23 Q&As - Pass Guarantee or Full Refund
[May-2024] 1z0-1067-23 Certification with Actual Questions from ActualTorrent
Oracle 1z0-1067-23 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
NEW QUESTION # 36
Which option contains the essential components of the Oracle Cloud Infrastructure Notifications service?
(Choose the best answer.)
- A. An ALARM with a name unique across the tenancy, a SUBSCRIPTION, and a MET-RIC with the measurement of interest.
- B. An ALARM with a name unique across the compartment, a SUBSCRIPTION, and a METRIC with the measurement of interest.
- C. A TOPIC with a name unique across the compartment, a SUBSCRIPTION, and a MESSAGE where content is published.
- D. A TOPIC with a name unique across the tenancy, a SUBSCRIPTION, and a MES-SAGE where content is published.
Answer: D
NEW QUESTION # 37
Which option is NOT a possible return value for an OCI health check?
- A. TIMED_OUT
- B. UNREACHABLE
- C. UNKNOWN
- D. INVALID_STATUS_CODE
- E. REGEX_MISMATCH
Answer: B
NEW QUESTION # 38
You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:
- A. Create a Network Security Group (NSG), add a stateful rule to allow ingress access on port 443, and associate it with the instance that hosts the company website.
- B. Create an NSG, add a stateful rule to allow ingress access on port 443, and associate it with the public subnet that hosts the company website.
- C. In the default security list, add a stateful rule to allow ingress access on port 443.Create a new security list with a stateful rule to allow ingress access on port 443 and associate it with the public subnet.
- D. You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet. Which action would you take to accomplish the task? (Choose the best answer.)
Answer: A
NEW QUESTION # 39
To upload a file from a compute instance into Object Storage, you SSH into the compute instance and run the following OCI CLI command: oci os object put -ns mynamespace -bn mybucket --name myfile.txt --file
/Users/me/myfile.txt --authinstance_principal Which statement must be true for this command to succeed?
- A. The bucket has a pre-authenticated request (PAR) that specifies the compute instance that will upload to it.
- B. The instance matches a matching rule for a dynamic group with the permission to up-load to the bucket.
- C. Your OCI user has the permission to upload to the bucket.
- D. Your OCI API key has been placed on the compute instance.
Answer: B
NEW QUESTION # 40
Your application is using an Object Storage bucket named app-data in the namespace vision, to store both persistent and temporary data. Every week all the temporary data should be deleted to limit the storage consumption. Currently you need to navigate to the Object Storage page using the web console, select the appropriate bucket to view all the objects and delete the temporary ones. To simplify the task you have configured theapplication to save all the temporary data with /temp prefix. You have also decided to use the Command Line Interface (CLI) to perform this operation. What is the command you should use to speed up the data cleanup? (Choose the best answer.)
- A. oci os object bulk-delete -ns vision -bn app-data --prefix /temp --force
- B. oci os object delete -ns vision -bn app-data --prefix /temp
- C. oci os object delete app-data in vision where prefix = /temp
- D. oci objectstorage bulk-delete -ns vision -bn app-data --prefix /temp -force
Answer: A
NEW QUESTION # 41
You have been asked to update the lifecycle policy for object storage using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI). Which command can successful-ly update the policy? (Choose the best answer.)
- A. oci os object-lifecycle-policy put --ns <object_storage_namespace> --bn <bucket_name>
- B. oci os object-lifecycle-policy put --ns <object_storage_namespace> --bn <bucket_name> -- --items
<json_formatted_lifecycle_policy> - C. oci os object-lifecycle-policy delete --ns <object_storage_namespace> --bn <buck-et_name>
- D. oci os object-lifecycle-policy get --ns <object_storage_namespace> --bn <bucket_name>
Answer: B
NEW QUESTION # 42
Which statement is incorrect regarding replication being turned ON for a bucket named my-bucket?
- A. Destination bucket becomes read-only after the replication policy is created, and undated only by replication from my-bucket.
- B. Objects deleted from my-bucket after policy creation are automatically deleted from the destination bucket.
- C. Objects uploaded to my-bucket before policy creation are not replicated to the destination bucket
- D. Replication policy creation also creates the destination bucket.
Answer: D
NEW QUESTION # 43
Scenario: 2 (Oracle Cloud-init and AutoScaling: Use cloud-init to Configure Apache on Instances in an Autoscaling Instance Pool) Scenario Description: (Hands-On Performance Exam Certification) You're deploying an Apache-based web application on OCI that requires horizontal autoscaling.
To configure instances upon provisioning, write a cloud-init script for Oracle Linux 8 that installs and enables Apache (httpd), and opens the firewall for HTTP on TCP port 80. Create aninstance configuration and include the cloud-init script in it. Use this instance configuration to create an instance pool and autoscaling configuration.
Pre-Configuration:
To fulfill this requirement, you are provided with the following:
Access to an OCI tenancy, an assigned compartment, and OCI credentials
A VCN Cloud-Init Challenge VCN with an Internet gateway and a public subnet. The security list for the subnet allows ingress via TCP ports 22 and 80 (SSH and HTTP). The route table forwards all egress to the Internet gateway.
Access to the OCI Console
Required IAM policies
An SSH key pair for the compute instance
Public Key
https://objectstorage.us-ashburn-1.oraclecloud.com/n/tenancyname/b/PBT_Storage/o/PublicKey.pub Private Key https://objectstorage.us-ashburn-1.oraclecloud.com/n/tenancyname/b/PBT_Storage/o/PKey.key Note: Throughout your exam, ensure to use assigned Compartment , User Name , and Region.
Complete the following tasks in the provisioned OCI environment:
Task 1(a): Develop the cloud-init Script:
Task 1(b): Use cloud-init to Configure Apache on Instances in an Autoscaling Instance Pool:
Answer:
Explanation:
See the solution below with Step by Step Explanation.
Explanation
Task 1(a): Develop the cloud-init Script:
Create a compute instance pbt_cloud_init_vm_01 with the following properties:
Shape: VM.Standard.A1.Flex instance with 1 OCPU and 6 GB memory
Image: Oracle Linux 8
Placement: Use any of the availability domains
Network:
Place in the public subnet Cloud-Init Challenge SNT
Assign a public IPv4
Use the SSH public key
Add a cloud-init script and perform the following:
Use yum or dnf to install httpd.
Use systemctl to enable and start httpd
Open the firewall to http:
sudo firewall-offline-cmd --add-service=http
systemctl restart firewalld
Mark Complete
Task 1(b): Use cloud-init to Configure Apache on Instances in an Autoscaling Instance Pool:
You're deploying an Apache-based web application on OCI that requires horizontal autoscaling.
To configure instances upon provisioning, write a cloud-init script for Oracle Linux 8 that installs and enables Apache (httpd), and opens the firewall for HTTP on TCP port 80. Create an instance configuration and include the cloud-init script in it. Use this instance configuration to create an instance pool and autoscaling configuration.
Task 2: Create an Autoscaling Instance Pool Including the cloud-init Script:
Create an instance configuration named pbt_cloud_init_config_01 with the following properties:
Shape: VM.Standard.A1.Flex instance with 1 OCPU and 6 GB memory
Image: Oracle Linux 8
Placement: Use any of the availability domains
Network:
Place in the public subnet Cloud-Init Challenge SNT
Assign a public IPv4
Use the SSH public key
Attach the cloud-init script created in Task 1
Create an instance pool named pbt_cloud_init_pool_01 with one instance by using the instance configuration pbt_cloud_init_config_01 Create and attach an autoscaling configuration named pbt_cloud_autoscaling_config_01 with the following settings:
Metric-based autoscaling
Cooldown: 300 second
Performance metric: CPU utilization
Scale-out rule:
Operator: Greater than (>)
Threshold: 75%
Number of instances to add: 1
Scale-in rule:
Operator: Less than (<)
Threshold: 25%
Number of instances to remove: 1
Scaling limits:
Minimum number of instances: 1
Maximum number of instances: 2
Initial number of instances: 1
Task 1: Develop the cloud-init script
In the main menu, go to Compute > Instances and click Create an Instance In the instance creation menu, enter the following details a. Name: Provide name given in the instructions b. Compartment: Use the assigned compartment c. Placement: Use any of the availability domains d. Image: Oracle Linux 8 e. Shape: VM.Standard.A1.Flex instance with 1 OCPU and 6 GB memory f. Network:
i. Place in the public subnet
ii. Assign a public IPv4
g. SSH keys: Upload or paste the provided SSH public key
h. Boot volume: Leave as default
i. Under advanced options, add the following cloud-init script:
#!/bin/shsudo dnf install httpd --assumeyes --quietsudo systemctl enable httpdsudo systemctl start httpdsudo firewall-offline-cmd --add-service=httpsystemctl restart firewalld j. Create the instance.
Task 2: Create an autoscaling instance pool including the cloud-init script
1. In the main menu, go to Compute > Instance Configurations. Click Create instance configuration.
a. In the instance configuration creation menu, enter the same details as before:
b. Name: Provide name given in the instruction/if not specified provide any name c. Compartment: Assigned compartment d. Placement: Use any of the availability domains e. Image: Oracle Linux 8 f. Shape: VM.Standard.A1.Flex instance with 1 OCPU and 6 GB memory g. Network:
i. Place in the public subnet
ii. Assign a public IPv4
h. SSH keys: Upload or paste the provided SSH public key
i. Boot volume: Leave as default
j. Under advanced options, add the following cloud-init script:
#!/bin/shsudo dnf install httpd --assumeyes --quietsudo systemctl enable httpdsudo systemctl start httpdsudo firewall-offline-cmd --add-service=httpsystemctl restart firewalld k. Create the instance configuration.
Task 2: In the main menu, go to Compute > Instance Pools. Click Create instance pool.
Enter the following details:
a. Name: Provide name given in the instruction/if not specified provide any name b. Compartment: Assigned compartment c. Instance configuration: Created in last step d. Number of instances: 1 e. Select any availability domain f. Leave fault domain unselected g. Primary VNIC: Provided VCN in the instructions h. Subnet: Public subnet i. Do not attach a load balancer j. Create the instance pool Task 3: In the main menu, go to Compute > Autoscaling Configurations. Click Create autoscaling configuration and enter the following details:
a. Name: Provide name given in the instruction/if not specified provide any name b. Compartment: Assigned compartment c. Instance Pool: Created in last step d. Select Metric-based autoscaling e. Autoscaling policy name: Does not matter f. Cooldown: 300 seconds g. Performance metric: CPU utilization h. Scale-out rule:
i. Operator: Greater than (>)
ii. Threshold: 75%
iii. Number of instances to add: 1
i. Scale-in rule:
i. Operator: Less than (<)
ii. Threshold: 25%
iii. Number of instances to remove: 1
j. Scaling limits:
i. Minimum number of instances: 1
ii. Maximum number of instances: 2
iii. Initial number of instances: 1
k. Create the autoscaling configuration.
NEW QUESTION # 44
Which technique does NOT help you get the optimal performance out of the Oracle Cloud Infrastructure (OCI) File Storage service? (Choose the best answer.)
- A. Right size compute instances from where file system is accessed based on their network capacity.
- B. Increase concurrency by using multiple threads, multiple clients, and multiple mount targets.
- C. Limit access to the same Availability Domain (AD) as the File Storage service where possible.
- D. Serialize operations to the file system to access consecutive blocks as much as possible.
Answer: D
NEW QUESTION # 45
You are working as a Cloud Operations Administratorfor your company. They have different Oracle Cloud Infrastructure (OCI) tenancies for development and production work-loads. Each tenancy has resources in two regions uk-london-1 and eu-frankfurt-1. You are asked to manage all resources and to automate all the tasks using OCI Command Line Inter-face (CLI). Which is the most efficient method to manage multiple environments using OCI CLI? (Choose the best answer.)
- A. Create environment variables for the sets of credentials that align to each combination of tenancy, region, and environment.
- B. Use OCI CLI profiles to create multiple sets of credentials in your config file, and refer-ence the appropriate profile at runtime.
- C. Use different bash terminals for each environment.
- D. Run oci setup config to create new credentials for each environment every time you want to access the environment.
Answer: B
NEW QUESTION # 46
You have been asked to ensure that in-transit communication between an Oracle Cloud Infrastructure (OCI) compute instance and an on-premises server (192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a Dynamic IPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added. What solution should you recommend? (Choose the best answer.)
- A. Advertise a 192.168.10.10/32 route over the VPN.
- B. The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.
- C. Advertise a 192.168.10.10/32 router over the FastConnect.
- D. The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.
Answer: A
NEW QUESTION # 47
The general syntax for an IAM policy is: Allow <identity_domain_name>/<subject> to <verb>
<resource-type> in <location> where <conditions> Which two are valid values for <verb>?
- A. read
- B. create
- C. manage
- D. alter
- E. destroy
Answer: A,C
NEW QUESTION # 48
You have created a geolocation steering policy in the Oracle Cloud Infrastructure (OCI) Traffic Management service, with this configuration:
What happens to requests that originate in Africa? (Choose the best answer.)
- A. The traffic will be forwarded randomly to any of the pools mentioned in the rules.
- B. The traffic will be forwarded to Pool 1. If Pool 1 is not available, then it will be for-warded to Pool 2.
- C. The traffic will be forwarded at the same time to both Pool 1 and Pool 2.
- D. The traffic will be dropped.
Answer: A
NEW QUESTION # 49
Which two statements are TRUE about Object Storage data security and encryption in Oracle Cloud Infrastructure (OCI)? (Choose two.)
- A. Client-side encryption is managed by the customer.
- B. Data needs to be decrypted on the client side before retrieving it.
- C. A VPN connection to OCI is required to ensure securedata transfer to an object storage bucket.
- D. OCI Vault Management is used by default to provide data security.
- E. All traffic to and from Object Storage service is encrypted using TLS.
Answer: A,E
NEW QUESTION # 50
You have a group of developers who launch multiple VM.Standard3.Flex compute in-stances every day into the compartment Dev. As a result, your Oracle Cloud Infrastructure (OCI) tenancy quickly hits the service limit for this shape, andother groups can no longer create new instances using the VM.Standard3.Flex shape.
Therefore, your company issues a new mandate that the Dev compartment must include a quota that allows the use of only 20 VM.Standard3.Flex OCPUs per availability domain, without affecting any other compartment in the tenancy. Which quota statement would you use to implement this new requirement?
- A. set compute-core quota standard3-core-count to 20 in compartment dev where re-quest.region = us-phoenix-1
- B. zero compute-core quotas in tenancy set compute-core quota standard3-core-count to 20 in compartment dev
- C. zero compute-core quotas in tenancy set compute-core quota standard3-core-count to 20 in tenancy dev
- D. set compute-core quota standard3-core-count to 20 in compartment dev
Answer: D
NEW QUESTION # 51
You have been asked to review a network design for Oracle Cloud Infrastructure (OCI) by a major client. The client IT team needs to provision two Virtual Cloud Networks (VCNs) for a major application. The application uses a large number of virtual machine instances. Additionally, in the future, a VCN peering will be required to allow connectivity between the VCNs. Which of the following are valid IP ranges to consider? (Choose the best answer.)
- A. 10.0.0.0/8 and 11.0.0.0/8
- B. 10.0.0.0/30 and 192.168.0.0/30
- C. 10.0.8.0/21 and 10.0.16.0/22
- D. 10.0.0.0/16 and 10.0.64.0/24
Answer: C
NEW QUESTION # 52
The general syntax for an IAM policy is: Allow <identity_domain_name>/<subject> to <verb>
<resource-type> in <location> where <conditions> Which two are valid values for <lo-cation>?
- A. availability-domain aBCD:us-phoenix-1
- B. tenancy
- C. region us-phoenix-1
- D. security-zone MyZone
- E. compartment MyCompartment
Answer: B,E
NEW QUESTION # 53
You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG:
NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:
However, after checking the bastion host logs, you discovered that there are IP addresses other than your own that can access your bastion host. What is the root cause of this issue? (Choose the best answer.)
- A. The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.
- B. All compute instances associated with NSG-050504 are also able to connect to the bastion host.
- C. The Security List allows access to all IP address which overrides the Network Security Group ingress rules.
- D. A netmask of /32 allows all IP address in the 140.19.2.0 network, other than your IP 140.19.2.140
Answer: B
NEW QUESTION # 54
All the developers in a DevOps team are using the same compartment called 'devops'. There are two IAM groups: 'group-devs' and 'group-ops'. Which of the following IAM policy will give users in both these groups access to manage all resources in the compartment?
- A. Allow any-user to manage all resources in compartment devops where any
{re-quest.group=group-dev,group-ops}. - B. Allow group /group*/ to manage all resources in compartment devops.
- C. Allow any-user to manage all resources in compartment devops where request.group= /group*/.
- D. Allow group group-dev, group-ops to manage all resources in compartment devops.
Answer: D
NEW QUESTION # 55
......
1z0-1067-23 Real Valid Brain Dumps With 89 Questions: https://www.actualtorrent.com/1z0-1067-23-questions-answers.html
Updated 1z0-1067-23 Dumps PDF: https://drive.google.com/open?id=1jmjZXbWoTs-VhEzXNyJQqBDz77AIhZMS