Winter Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: dumps65

Oracle 1z0-1067-24 Dumps

Page: 1 / 9
Total 93 questions

Oracle Cloud Infrastructure 2024 Cloud Operations Professional Questions and Answers

Question 1

You have created several block volumes in the us-phoenix-1 region in a specific compart-ment. The compartment can be identified by the following Oracle Cloud Infrastructure (OCI) unique identifier, or ocid1.compartment.oc1.phx..exampleuniquelD Your manager has asked you to leverage the OCI monitoring service and write a metric query showing all read IOPS at a one-minute interval, filtered to this compartment and aggregated for the maximum. Which metric query will you create?

Options:

A.

IopsRead[lm]{compartmentId = 'odd1.compartment.ocl.phx..exampleuniquelD'}.grouping().mean()

B.

IopsRead[lm]{compartmentId='ocldl.compartment.ocl.phx..exampleuniquelD'}.max()

C.

Iop-sWrite[lm]{compartmentId=Hocidl.compartment.ocl.phx..exampleuniquelD'}.mean()

D.

Iop-sRead[lm{compartmentId='ocidl.compartment.ocl.phx..exampleuniquelD'}.grouplng().max()

Question 2

You are working with Terraform on your laptop and have been tasked with spinning up multiple compute instances in Oracle Cloud Infrastructure (OCI) for a project. In addition, you are also required to collect IP addresses of provisioned instances and write them to a file and save it in your laptop. Which specific Terraform functionality can help accomplish this task? (Choose the best answer.)

Options:

A.

Terraform remote-exec

B.

Terraform remote state

C.

Terraform modules

D.

Terraform local-exec

Question 3

All the developers in a DevOps team are using the same compartment called 'devops'. There are two IAM groups: 'group-devs' and 'group-ops'. Which of the following IAM policy will give users in both these groups access to manage all resources in the compartment?

Options:

A.

Allow group group-dev, group-ops to manage all resources in compartment devops.

B.

Allow group /group*/ to manage all resources in compartment devops.

C.

Allow any-user to manage all resources in compartment devops where any {re-quest.group=group-dev,group-ops}.

D.

Allow any-user to manage all resources in compartment devops where request.group= /group*/.

Question 4

You are running an old version of PostgreSQL on several compute instances and want to update to the latest version. Which tool must you use to update the PostgreSQL packages on the existing machines?

Options:

A.

Ansible

B.

OCI Package Manager

C.

Terraform

D.

OCI CLI

Question 5

When creating an alarm query in Oracle Cloud Infrastructure (OCI) Monitoring, which of the following statement is NOT valid?

Options:

A.

You must specify Trigger rule (threshold or absence).

B.

You must specify an interval

C.

You must specify Statistic

D.

You must specify a Metric

E.

You must specify Resource Group

Question 6

Your application is using an Object Storage bucket named app-data in the namespace vision, to store both persistent and temporary data. Every week all the temporary data should be deleted to limit the storage consumption. Currently you need to navigate to the Object Storage page using the web console, select the appropriate bucket to view all the objects and delete the temporary ones. To simplify the task you have configured the application to save all the temporary data with /temp prefix. You have also decided to use the Command Line Interface (CLI) to perform this operation. What is the command you should use to speed up the data cleanup? (Choose the best answer.)

Options:

A.

oci os object bulk-delete -ns vision -bn app-data --prefix /temp --force

B.

oci os object delete app-data in vision where prefix = /temp

C.

oci os object delete -ns vision -bn app-data --prefix /temp

D.

oci objectstorage bulk-delete -ns vision -bn app-data --prefix /temp –force

Question 7

You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively. You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us phoenix-1 region only and not any other OCI regions. What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.)

Options:

A.

Allow group PHX-Admins to manage all-resources in tenancy where re-guest.target='us-phoenix-1'

B.

Allow group PHX-Admins to manage all-resources in tenancy where re-guest.permission= 'us-phoenix-1'

C.

Allow group PHX-Admins to manage all-resources in tenancy where re-guest.region='us-phoenix-1'

D.

Allow group PHX-Admins to manage all-resources in tenancy where re-guest.location='us-phoenix-1'

Question 8

Security Testing Policy describes when and how you may conduct certain types of security testing of Oracle Cloud Services, including vulnerability and penetration tests, as well as tests involving data scraping tools. What does Oracle allow as part of this testing? (Choose the best answer.)

Options:

A.

Customers can validate that their network resources are isolated from other customer resources.

B.

Customers are allowed to use their own testing and monitoring tools.

C.

Customers can simulate DoS attack scenarios as long as it restricted to the customer own environment.

D.

Customers are allowed to test Oracle Cloud Infrastructure (OCI) hardware related to resources in their tenancy.

Question 9

You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:

as

Options:

A.

You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet. Which action would you take to accomplish the task? (Choose the best answer.)

B.

Create an NSG, add a stateful rule to allow ingress access on port 443, and associate it with the public subnet that hosts the company website.

C.

Create a Network Security Group (NSG), add a stateful rule to allow ingress access on port 443, and associate it with the instance that hosts the company website.

D.

In the default security list, add a stateful rule to allow ingress access on port 443.

Create a new security list with a stateful rule to allow ingress access on port 443 and associate it with the public subnet.

Question 10

You have a 750 MIB file in an Oracle Cloud Infrastructure (OCI) Object Storage bucket. You want to download the file in multiple parts to speed up the download using the OCI CLI. You also want to configure each part size to be 128 MIB. Which is the correct OCI CLI command for this operation? (Choose the best answer.)

Options:

A.

oci os object download -ns my-namespace -bn my-bucket --name my-large-object --resume-put --multipart-download-threshold 500 --part-size 128

B.

oci os object download -ns my-namespace -bn my-bucket --name my-large-object --multipart-download-threshold 750 --parallel-download-count 128

C.

oci os object get -ns my-namespace -bn my-bucket --name my-large-object --multipart-download-threshold 500 --part-size 128

D.

oci os object get -ns my-namespace -bn my-bucket --name my-large-object --multipart-download-threshold 750 --parallel-download-count 128

Question 11

The general syntax for an IAM policy is: Allow / to in where Which two are valid values for ?

Options:

A.

tenancy

B.

availability-domain aBCD:us-phoenix-1

C.

compartment MyCompartment

D.

security-zone MyZone

E.

region us-phoenix-1

Question 12

Which of the following THREE statements are true about Versioning? (Choose three.)

Options:

A.

You can enable the Versioning and Retention rule simultaneously on bucket.

B.

If versioning enabled, even if you delete the file inside the bucket, you will be charged for the data shared as the meta data still resides inside the bucket.

C.

If Versioning is enabled and you delete the files stored in a bucket, then a delete marker is created so that you can restore the deleted file.

D.

If Versioning disabled, and you try uploading files with the same name, then a copy of the file in kept with a different name.

E.

Versioning is applied at the bucket level.

Question 13

Your company has restructured its HR department. As part of this change, you also need to re-organize the compartments within Oracle Cloud Infrastructure (OCI) to align them with the company's new organizational structure. The following change is required:

as

Compartment Team_x needs to be moved under a new parent compartment, Project_B

The tenancy has the following policies defined for compartments Project_A and Project_B:

Policy1: Allow group G1 to manage instance-family in compartment HR:Project_A

Policy2: Allow group G2 to manage instance-family in compartment HR:Project_B

Which two statements describe the impacts after the compartment Team_x is moved? (Choose two.)

Options:

A.

Group G2 can now manage instance-families in compartment Project_B, compartment Project_A and compartment Team_X

B.

Group G2 can now manage instance-families in compartment Project_B and compart-ment Team_X

C.

Group G1 can now manage instance-families in compartment Project_A, compartment Project_B and compartment Team_X

D.

Group G2 can now manage instance-families in compartment Project_A but not in compartment Team_x

E.

Group G1 can now manage instance-families in compartment Project_A but not in compartment Team_x

Question 14

In your root compartment, you have two subcompartments, A and B. You have three in-stances in each compartment, including the root (for a total of nine). What does the following metric query return if you use the console to run it in the root compartment? CpuUtiliza-tion[1m].mean()

Options:

A.

One time series: the average CPU utilization over the three instances in the root compartment per minute

B.

One number: the average CPU utilization over all nine instances over the last minute

C.

One time series: the average CPU utilization over all nine instances per minute

D.

Three different time series: each time series represents the average CPU utilization of one of the three instances in the root compartment per minute.

Question 15

Scenario: 3  (Use the OCI CLI to Work with Object Storage from a Compute Instance)

Scenario Description:  (Hands-On Performance Exam Certification)

Your  company runs a web application in OCI that generates log files. You  want to upload these files to OCI Object Storage to meet data retention  requirements. Some files need to be retained indefinitely, whereas  others can be deleted after 30 days. Use the OCI CLI to  create bucket and upload the log directory and create a lifecycle  policy rule to delete temporary files after 30 days.

Pre-Configuration:

To fulfill this requirement, you are provided with the following:

Access to an OCI tenancy, an assigned compartment, and OCI credentials

A compute instance with OCI CLI installed and a set of files in ~/dir_to_upload to use

Access to the OCI Console

Required IAM policies

Assumptions:

Perform the tasks by using the OCI CLI on the compute instance.

Use instance principal authentication for all CLI commands; the instance has been given the policies necessary.

Connect to the compute instance using Cloud Shell’s private networking and the provided SSH key.

An SSH key pair has been provided to you for the compute instance.

Private Key 1.oraclecloud.com/n/tenancyname/b/PBT_Storage/o/PKey.key

Note: Throughout your exam, ensure to use assigned Compartment , User Name  and Region.

Complete the following tasks in the provisioned OCI environment:

Task 1: Create a Bucket in Object Storage

Task 2: Upload a Directory’s Contents to Object Storage

Task 3: Add a Lifecycle Policy to the Bucket

Options:

Question 16

Scenario: 2  (Oracle Cloud-init and AutoScaling: Use cloud-init to Configure Apache on Instances in an Autoscaling Instance Pool)

Scenario Description:  (Hands-On Performance Exam Certification)

You're deploying an Apache-based web application on OCI that requires horizontal autoscaling.

To  configure instances upon provisioning, write a cloud-init script for  Oracle Linux 8 that installs and enables Apache (httpd), and opens the  firewall for HTTP on TCP port 80. Create an instance configuration and  include the cloud-init script in it. Use this instance configuration to  create an instance pool and autoscaling configuration.

Pre-Configuration:

To fulfill this requirement, you are provided with the following:

Access to an OCI tenancy, an assigned compartment, and OCI credentials

A  VCN Cloud-Init Challenge VCN with an Internet gateway and a public  subnet. The security list for the subnet allows ingress via TCP ports 22  and 80 (SSH and HTTP). The route table forwards all egress to the  Internet gateway.

Access to the OCI Console

Required IAM policies

An SSH key pair for the compute instance

Public Key

Private Key

Note: Throughout your exam, ensure to use assigned Compartment , User Name , and Region.

Complete the following tasks in the provisioned OCI environment:

Task 1(a): Develop the cloud-init Script:

Task 1(b): Use cloud-init to Configure Apache on Instances in an Autoscaling Instance Pool:

Options:

Question 17

Scenario: 4  (Write Identity and Access Management Policies to Secure a Tenancy)

Scenario Description:  (Hands-On Performance Exam Certification)

Your  company has signed up for an OCI tenancy to migrate an e-commerce  application, a supply chain management (SCM) system, and a customer  relationship management (CRM) system.  You have been tasked with setting  up the requisite identity and access management (IAM) policies for your  team to begin developing on OCI.

You start by setting up the following compartment hierarchy:

    Tenancy (root)

       Common-Infra

             Network

             Security

       Applications

             E-Comm

             SCM

             CRM

You create the following groups:

    Network-Admins

    Security-Admins

    E-Comm-Admins

    SCM-Admins

    CRM-Admins

Write the IAM policies for the following use cases:

Assumptions:

Assume that all policies will be attached to the root compartment.

Write one policy per given text box.

Keep  policies as simple as possible by using verbs instead of permissions  (for example, “inspect orm-stacks” instead of “ORM_STACK_INSPECT”) and  aggregate resource types instead of individual ones (for example,  “file-family” instead of “file-systems” and “mount-targets”)

Task 1

Write  a policy statement to enable Network-Admins to create and destroy  network-related resources, such as VCNs, subnets, gateways, and so on in  the Network compartment.

Task 2

Write  policy statements to enable E-Comm-Admins to provision and destroy  compute instances in the E-Comm compartment by using networking  resources in the Network compartment.[Write one policy per given text  box]

Task 3

Write a  policy statement to enable SCM-Admins to provision, destroy, and back up  block volumes in the SCM compartment—but only in Phoenix and London.

Options:

Question 18

Scenario: 1  (Create a reusable VCN Configuration with Terraform)

Scenario Description:  (Hands-On Performance Exam Certification)

You’ll  launch and destroy a VCN and subnet by creating Terraform automation  scripts and issuing commands in Code Editor. Next, you’ll download those  Terraform scripts and create a stack by uploading them into Oracle  Cloud Infrastructure Resource Manager.

You’ll then use that service to  launch and destroy the same VCN and subnet.

In this scenario, you will:

a. Create a Terraform folder and file in Code Editor.

b. Create and destroy a VCN using Terraform.

c. Create and destroy a VCN using Resource Manager.

Options:

Page: 1 / 9
Total 93 questions