1Z0-1072 practice questions 11–20

1. Question 11 · 57 in bank

   Which is NOT a valid action within the Oracle Cloud Infrastructure (OCI) Block Volume service?

   • AExpanding an existing volume in place with offline resizing.
   • BRestoring from a volume backup to a larger volume.
   • CCloning an existing volume to a new, larger volume.
   • DAttaching a block volume to an instance in a different availability domain.

   Show answer

   Answer: D

   Explanation

   In OCI, volumes are only accessible to instances in the same availability domain . You cannot move a volume between availability domains or regions, they are only accessible within the region or availability domain they were created in.

   Source: Adapted from community discussion — RudolfBritto

   References

   • Oracle documentation
   • Oracle documentation

   Next question

2. Question 12 · 57 in bank

   You are in the process of migrating several legacy applications from on-premises to Oracle Cloud Infrastructure (OCI). The current servers are already virtualized. However, you notice that the version of CentOS currently running does not align with any of the Oracle-provided compute images. How would you migrate your existing virtual server images to OCI?

   • AExport your current image in the VDI format and copy to an Object Storage bucket. Import it as a custom image. Select native mode to ensure the best possible performance.
   • BExport your current image in the VMDK format and copy to an Object Storage bucket. Import it as a custom image. Select native mode to ensure the best possible performance.
   • CExport your current image in the QED format and copy to an Object Storage bucket. Import it as a custom image. Select emulated mode to ensure compatibility with legacy drivers.
   • DExport your current image in the QCOW2 format and copy to an Object Storage bucket. Import it as a custom image. Select emulated mode to ensure compatibility with legacy drivers.

   Show answer

   Answer: B

   Explanation

   Option D specifies the QCOW2 image format. QCOW2 is a virtual disk image format that is supported by OCI. However, if you select emulated mode when importing a QCOW2 image, the virtual machine will not be able to interact directly with the OCI hardware, which can result in performance degradation.

   Source: Adapted from community discussion — fklm

   Next question

3. Question 13 · 57 in bank

   You are a system administrator of your company and you are managing a complex environment consisting of compute instances running Oracle Linux on Oracle Cloud Infrastructure (OCI). It’s your task to apply all the latest kernel security updates to all instances. Which OCI service will allow you to complete this task?

   • AOCI Security Zones
   • BOS Management service
   • COCI Registry
   • DOCI Streaming service

   Show answer

   Answer: B

   Explanation

   The OS Management service in OCI provides capabilities for managing the lifecycle of operating system updates, including patching and updating Oracle Linux instances. With OS Management, you can automate the process of applying patches and updates across multiple instances, ensuring that they are all up-to-date with the latest kernel security updates.

   Source: Adapted from community discussion — Mopo

   Next question

4. Question 14 · 57 in bank

   You have three compartments: ProjectA, ProjectB, and ProjectC. For each compartment, there is an admin group set up: A-Admins, B-Admins, and C-Admins. Each admin group has full access over their respective compartments as shown in the graphic below. Your organization has set up a tag namespace, EmployeeGroup.Role and all your admin groups are tagged with a value of 'Admin'.

   

   You want to set up a Test compartment for members of the three projects to share. You also need to provide admin access to all three of your existing admin groups. Which policy would you write to accomplish this task?

   • AAllow all-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'
   • BAllow dynamic-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'
   • CAllow any-user to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'
   • DAllow group any-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'

   Show answer

   Answer: C

   Explanation

   There is NOTHING called all-group. Search the Oracle Training Guide and check for yourself C is the correct answer (any-user)

   Source: Adapted from community discussion — Hotman1987

   References

   • Oracle documentation
   • Oracle documentation

   Next question

5. Question 15 · 57 in bank

   You need to set up instance principals so that an application running on an instance can call Oracle Cloud Infrastructure (OCI) public services, without the need to configure user credentials or a configuration file. A developer in your team has already configured the application built using an OCI SDK to authenticate using the instance principals provider. Which is NOT a necessary step to complete this set up?

   • ACreate a policy granting permissions to the dynamic group to access services in your compartment or tenancy.
   • BGenerate Auth Tokens to enable instances in the dynamic group to authenticate with APIs.
   • CCreate a dynamic group with matching rules to specify which instances can make API calls against services.
   • DDeploy the application and the SDK to all the instances that belong to the dynamic group.

   Show answer

   Answer: B

   Explanation

   Generating Auth Tokens is not necessary for instance principals authentication. Instance principals allow the instances themselves to authenticate with OCI services without requiring explicit authentication tokens. Instead, the instances use the built-in identity of the instance to authenticate and access OCI resources.

   Source: Adapted from community discussion — Mopo

   Next question

6. Question 16 · 57 in bank

   Select 2

   Which TWO statements about the Oracle Cloud Infrastructure (OCI) File Storage Service are accurate? (Choose two.)

   • AFile systems use Oracle-managed keys by default.
   • BCustomer can encrypt data in their file system using their own Vault encryption key.
   • CMount targets use Oracle-managed keys by default.
   • DCommunication with file systems in a mount target is encrypted via HTTPS.
   • ECustomer can encrypt the communication to a mount target via export options.

   Show answer

   Answer: AB

   References

   • Oracle documentation

   Next question

7. Question 17 · 57 in bank

   You created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains a DB System. The application requires a shared file system, therefore you have provisioned one using the file storage service (FSS). You have also created the corresponding mount target in one of the application subnets. The VCN security lists are properly configured so that the application servers can access FSS. The security team changed the settings for the DB System to have read-only access to the file system. However, when they test it, they are unable to access FSS. How would you allow access to FSS?

   • ACreate an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet.
   • BModify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateless.
   • CCreate an instance principal for the DB System. Write an Identity and Access Management (IAM) policy that allows the instance principal read-only access to the file storage service.
   • DModify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateful.

   Show answer

   Answer: A

   Explanation

   NFS export options define access permissions for NFS clients accessing the file system. By creating an NFS export option with READ_ONLY access, you restrict the DB System to read-only access. You specify the source of access in the export option, which in this case would be the CIDR range of the DB System subnet. This ensures that only resources within the DB System subnet can access the file system. Configuring the NFS export option in this manner ensures that the DB System has the necessary permissions to access the file system for its read-only operations.

   Source: Adapted from community discussion — Mopo

   Next question

8. Question 18 · 57 in bank

   Which Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) policy is invalid?

   • AAllow group A-Developers to create volumes in compartment Project-A
   • BAllow group A-Admins to manage all-resources in compartment Project-A
   • CAllow any-user to inspect users in tenancy
   • DAllow dynamic-group FrontEnd to manage instance-family in compartment Project-A

   Show answer

   Answer: A

   References

   • Oracle documentation

   Next question

9. Question 19 · 57 in bank

   Which statement is true about File System Replication in Oracle Cloud Infrastructure (OCI)?

   • AYou cannot specify a replication interval when you create the replication resource.
   • BOnly a file system that has been exported can be used as a target file system.
   • CYou can replicate the data in one file system to another file system in the same region or a different region.
   • DYou can replicate the data in one file system to another file system only in the same region.

   Show answer

   Answer: C

   Explanation

   File System Replication in OCI allows you to replicate data from one file system to another, providing redundancy and disaster recovery capabilities. You can replicate data within the same region or across different regions, allowing for cross-region redundancy and disaster recovery solutions. This feature enables you to maintain copies of your data in multiple locations, improving data availability and resilience to regional failures.

   Source: Adapted from community discussion — Mopo

   Next question

10. Question 20 · 57 in bank

    Which of the following is a valid RFC 1918 CIDR prefix that can be used for creating an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN)?

    • A192.168.0.0/16
    • B192.268.0.0/24
    • C10.0.0.0/8
    • D172.16.0.0/12
    • E189.215.154.89/32
    • F0.0.0.0/0

    Show answer

    Answer: A

    Explanation

    10.0.0.0/8 cannot be used as a VCN range, because "The allowable VCN size range is /16 to /30. Example: 10.0.0.0/16." Source: https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/overview.htm

    Source: Adapted from community discussion — FukYuu

    References

    • Oracle documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

1Z0-1072 practice, question 11. 57 questions available.