1Z0-1072 practice questions 51–57

1. Question 51 · 57 in bank

   Which statement accurately describes the key features and benefits of OCI Confidential Computing?

   • AIt optimizes network performance and reduces latency through advanced routing algorithms and caching mechanisms.
   • BIt provides automatic scalability and load balancing capabilities, which allow seamless integration with other cloud providers.
   • CIt encrypts and isolates in-use data and the applications processing that data, thereby preventing unauthorized access or modification.
   • DIt enables users to securely store and retrieve data by using distributed file systems, ensuring high availability and fault tolerance.

   Show answer

   Answer: C

   References

   • Oracle documentation

   Next question

2. Question 52 · 57 in bank

   Select 2

   You are part of a team that manages a set of workload instances running in an on-premises environment. The Architect team is tasked with designing and configuring Oracle Cloud Infrastructure (OCI) Logging service to collect logs from these instances. There is a requirement to archive Info-level logging data of these instances into the OCI Object Storage. Which TWO features of OCI can help you achieve this? (Choose two.)

   • AGrouping Function
   • BCloud Agent Plugin
   • CObjectCollectionRule
   • DService Connectors
   • EAgent Configuration

   Show answer

   Answer: BD

   Next question

3. Question 53 · 57 in bank

   Select 2

   In which two ways can Oracle Security Zones assist with the cloud security shared responsibility model? (Choose two.)

   • AAllow access to an unsecured compartment, which is moved from a standard compartment.
   • BDeny public access to Oracle Cloud Infrastructure resources, such as databases and object storage buckets.
   • CAdd or move a standard compartment to a highly secured security zone compartment.
   • DEncrypt storage resources with a customer-managed key.

   Show answer

   Answer: BD

   References

   • Oracle documentation

   Next question

4. Question 54 · 57 in bank

   A financial firm is designing an application architecture for its online trading platform that should have high availability and fault tolerance. Their solutions architect configured the application to use an Oracle Cloud Infrastructure (OCI) Object Storage bucket located in the US West (us-phoenix-1) region to store large amounts of financial data. The stored financial data in the bucket should not be impacted even if there is an outage in one of the Availability Domains or a complete region. What should the architect do to avoid any costly service disruption and ensure data durability?

   • ACreate a lifecycle policy to regularly send data from the Standard to Archive storage.
   • BCreate a replication policy to send data to a different bucket in another OCI region.
   • CCopy the Object Storage bucket to a block volume.
   • DCreate a new Object Storage bucket in another region and configure lifecycle policy to move data every 5 days.

   Show answer

   Answer: B

   Next question

5. Question 55 · 57 in bank

   Select 2

   As a network architect you have been tasked with creating a fully redundant connection from your on-premises data center to your Virtual Cloud Network (VCN) in the us-ashburn-1 region. Which TWO options will accomplish this requirement? (Choose two.)

   • AConfigure two FastConnect virtual circuits to the us-ashburn-1 region and terminate them in diverse hardware on-premises.
   • BConfigure one FastConnect virtual circuit to the us-ashburn-1 region and the second FastConnect virtual circuit to the us-phoenix-1 region.
   • CConfigure a Site-to-Site VPN from a single on-premises CPE.
   • DConfigure one FastConnect virtual circuit to the us-ashburn-1 region and a Site-to-Site VPN to the us-ashburn-1 region.

   Show answer

   Answer: AD

   Explanation

   Correct. Since, Option B (Configuring a FastConnect virtual circuit to the us-phoenix-1 region) is not necessary for creating redundancy to the us-ashburn-1 region. Option C (Configuring a Site-to-Site VPN from a single on-premises CPE) does not provide redundancy by itself, as it relies on a single connection. Therefore, options A and D are the most suitable for achieving a fully redundant connection to the us-ashburn-1 region.

   Source: Adapted from community discussion — fklm

   Next question

6. Question 56 · 57 in bank

   As your company's cloud architect, you have been invited by the CEO to join his staff meeting. They want your input on interconnecting Oracle Cloud Infrastructure (OCI) to another cloud provider in London, with some specific requirements: They want resources in the other cloud provider to leverage OCI Autonomous Data Warehouse ML capabilities. The connection between OCI and the other cloud provider should be provisioned as quickly as possible. The connection should offer high bandwidth and predictable performance. Which other cloud provider should you recommend to interconnect with OCI and meet the above requirements?

   • AIBM Cloud
   • BMicrosoft Azure
   • CDigital Ocean
   • DAmazon Web Services
   • EGoogle Cloud
   • FOCI
   • GAlibaba Cloud

   Show answer

   Answer: B

   Next question

7. Question 57 · 57 in bank

   A recently hired network administrator has been given the task of removing SSH permissions from all compute instances in the company's tenancy. She finds all Virtual Cloud Networks (VCNs) in the tenancy using Tenancy Explorer. She removes port 22 from the Security Lists in all VCNs. After she completes the task, the very first compute instance that she tests SSH against, allows her to still SSH into it. Why is that?

   • AThe VCN where that compute instance resides still has an Internet Gateway.
   • BThe VCN where that compute instance resides still has a route rule that allows port 22.
   • CThe VNIC of that compute instance is attached to a Network Security Group (NSG) that has a stateful ingress rule for all protocols on source CIDR 0.0.0.0/0.
   • DThe VNIC of that compute instance is attached to a Cluster Network that has a stateful ingress rule for all protocols on source CIDR 0.0.0.0/0.

   Show answer

   Answer: C

   Explanation

   If the VNIC of the compute instance is attached to an NSG that has a stateful ingress rule allowing all protocols from the source CIDR 0.0.0.0/0, it means that all incoming traffic, including SSH traffic on port 22, is still permitted regardless of the Security Lists configured at the VCN level. NSG rules take precedence over Security Lists. To ensure that SSH access is completely disabled for the compute instance, the network administrator should review and modify the NSG associated with the compute instance's VNIC to remove the stateful ingress rule allowing SSH traffic.

   Source: Adapted from community discussion — Mopo

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

1Z0-1072 practice, question 51. 57 questions available.