Oracle : 1Z0-1067-20 Questions & Answers

You have created several block volumes in the us-phoenix-1 region in a specific compartment. The compartment can be identified by the following Oracle Cloud Infrastructure (OCI) unique identifier, or ocid1.compartment.oc1.phx..exampleuniquelD Your manager has asked you to leverage the OCI monitoring service and write a metric query showing all read IOPS at a one-minute interval, filtered to this compartment and aggregated for the maximum.
Which metric query will you create?

• A. IopsWrite[lm]{compartmentId=Hocidl.compartment.ocl.phx..exampleuniquelD"}.mean()
• B. IopsRead[lm]{compartmentId = "odd 1.compartment.ocl.phx..exampleuniquelD"}.grouping().mean()
• C. IopsRead[lm]{compartmentId="ocldl.compartment.ocl.phx..exampleuniquelD"}.max()
• D. IopsRead[lm]{compartmentId="ocidl.compartment.ocl.phx..exampleuniquelD"}.grouplng().max()

You need to set up daily Incremental backups of your database In Oracle Cloud Infrastructure (OCI) Database Service. The backups need to be retained for at least 50 days.
Which of the following method allows you do accomplish this Is an efficient and cost effective manner?

• A. Enable automatic backups and choose the preset retention period of 60 days.
• B. Use Recovery Manager (RMAN) to take backups to an OCI Object Store bucket. Delete backups older than 50 days.
• C. Set up a cron job with OCI Database Service CreateBackuP API call to take periodic full-backups to OCI Object Store. Delete backups older than 50 days.
• D. Enable automatic backups and set the retention period to 50 days.

You want an instance in your compartment to make API calls to other services within Oracle Cloud Infrastructure without storing credentials in a configuration file.
What do you need to do?

• A. VM instances are treated as users. Create a user and assign the user to that VM instance
• B. Create appropriate matching rules in the Dynamic Group to create an Instance Principal
• C. No action is required. By default, all VM instances are created with an Instance Principal
• D. Instances cannot access services outside their compartment

You have been asked to investigate a potential security risk on your company's Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking through the audit logs for suspicious activity.
How can you retrieve the audit logs using the OCI Command Line Interface (CLI)?

• A. oci audit event list --start-time $start-time --compartment-id $compartment-id
• B. oci audit event list --end-time $end-time --compartment-id $compartment-id
• C. oci audit event list --start-time $start-time --end-time $end-time --tenancy-id $tenancy-id
• D. oci audit event list --start-time $start-time --end-time $end-time --compartment-id
  $compartment-id

You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute instances that are deployed private subnet. The Compute instances have an attached Network Security Group with a Source Type: Network security Group (NSG) , Source NSG:
-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:

However, after checking the bastion host logs, you discovered that there are IP addresses other than your own that can access your bastion host.
What is the root cause of this issue?

• A. The Security List allows access to all IP address which overrides the Network Security Group ingress rules.
• B. All compute instances associated with NSG-050504 are also able to connect to the bastion host.
• C. A netmask of /32 allows all IP address in the 140.19.2.0 network, other than your IP 110.19.2.140
• D. The port 22 provides unrestricted access to 140.19.2.140 and to other IP address