Jan 05, 2024 1z0-1072-23 Exam Crack Test Engine Dumps Training With 57 Questions [Q21-Q42]

5/5 - (1 vote)

Jan 05, 2024 1z0-1072-23 Exam Crack Test Engine Dumps Training With 57 Questions

Obtain the 1z0-1072-23 PDF Dumps Get 100% Outcomes Exam Questions For You To Pass

NO.21 You have three compartments: ProjectA, ProjectB, and ProjectC. For each compartment, there is an admin groupset up: A-Admins, B-Admins, and C-Admins.
Each admin group has full access over their respective compartments as shown in the graphic below.
Your organization has set up a tag namespace, EmployeeGroup.Role and all your admin groups are tagged with a value of ‘Admin’.

You want to set up a Test compartment for members of the three projects to share. You also need to provideadmin access to all three of your existing admin groups.
Which policy would you write to accomplish this task?

Allow all-group to manage all-resources in compartment Test where
request.principal.group.tag.EmployeeGroup.Role=’Admin’

Allow dynamic-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role=’Admin’

Allow group any-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role=’Admin’

Allow any-user to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role=’Admin’

NO.22 As a solution architect, you are showcasing the Oracle Cloud Infrastructure (OCI) Object Storage feature aboutObject Versioning to a customer.
Which statement is true regarding OCI Object Storage Versioning?

Objects are physically deleted from a bucket when versioning is enabled.

Object Versioning is disabled on a bucket by default.

A bucket that is versioning-enabled can and will always have the latest version of the object in the bucket.

Object Versioning does not provide data protection against accidental or malicious object update, overwrite, or deletion.

NO.23 You are a security administrator for your company’s Oracle Cloud Infrastructure (OCI) tenancy. Your storage administrator informs you that she cannot associate an encryption key from an existing Vault to a new Object Storage bucket.
What could be a possible reason for this behavior?

The Object Storage bucket policy lacks the necessary Access Control List (ACL).

The storage administrator forgot to select “Encrypt using Oracle managed keys” while creating the bucket.

There is no Identity and Access Management (IAM) policy that allows the Object Storage service to use thekey.

The secret for the key was not created beforehand

NO.24 In which TWO ways does Cloud Guard help improve the overall security posture for your tenancy?

Monitors unauthorized or suspicious user activity.

Allows you to centrally manage encryption keys.

Prevents you from creating misconfigurations on your resources in Oracle Cloud Infrastructure (OCI).

Masks sensitive data and monitors security controls on your Oracle databases.

Helps detect misconfigured resources, such as publicly accessible Object Storage buckets, instances, and restricted ports on security lists.

NO.25 Which TWO statements are NOTcorrect regarding the Oracle Cloud Infrastructure (OCI) burstable instances?

If the instance’s average CPU utilization over the past 24 hours is below the baseline, the system allows it to burst above the baseline.

Baseline utilization is a fraction of each CPU core, either 25% or 75%.

Burstable instances cost less than regular instances with the same total OCPU count.

Burstable instances are designed for scenarios where an instance is not typically idle and has high CPU utilization.

Burstable instances are charged according to the baseline OCPU.

NO.26 Which is NOT a valid Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) approach?

Ensure not all IP addresses are allocated at once within a VCN or subnet; instead reserve some IP addresses for future use.

Use OCI tags to tag VCN resources so that all resources follow organizational tagging/naming conventions.

Private subnets should ideally have individual route tables to control the flow of traffic within and outside of VCN.

Ensure VCN CIDR prefix overlaps with other VCNs in your tenancy or with your organizations private IP network ranges.

NO.27 Which TWO are key benefits of setting up Site-to-Site VPN on Oracle Cloud Infrastructure (OCI)?

When setting up Site-to-Site VPN, it creates a private connection that provides consistent network experience.

When setting up Site-to-Site VPN, customers can configure it to use static or dynamic routing (BGP).

When setting up Site-to-Site VPN, OCI provisions redundant VPN tunnels.

When setting up Site-to-Site VPN, customers can expect bandwidth above 2 Gbps.

NO.28 You are part of a team that manages a set of workload instances running in an on-premises environment.
TheArchitect team is tasked with designing and configuring Oracle Cloud Infrastructure (OCI) Logging service tocollect logs from these instances. There is a requirement to archive Info-level logging data of these instances intothe OCI Object Storage.
Which TWO features of OCI can help you achieve this?

Cloud Agent Plugin

Grouping Function

Service Connectors

Agent Configuration

ObjectCollectionRule

NO.29 Which THREE capabilities are available with the Oracle Cloud Infrastructure (OCI) DNS service?

Creating and managing records

Creating and managing WAF rules

Creating and managing Identity Access Management (IAM) policies

Creating and managing zones

Viewing all zones

Creating and managing security lists

NO.30 As a network architect you have been tasked with creating a fully redundant connection from your on-premisesdata center to your Virtual Cloud Network (VCN) in the us-ashburn-1 region.Which TWO options will accomplish this requirement?

Configure two FastConnect virtual circuits to the us-ashburn-1 region and terminate them in diverse hardware on-premises.

Configure a Site-to-Site VPN from a single on-premises CPE.

Configure one FastConnect virtual circuit to the us-ashburn-1 region andthe second FastConnect virtual circuit to the us-phoenix-1 region.

Configure one FastConnect virtual circuit to the us-ashburn-1 region and a Site-to-Site VPN to the usashburn-1 region.

NO.31 You have objects stored in an OCI Object Storage bucket that you want to share with a partner company. You decide to use pre-authenticated requests to grant access to the objects. Which statement is true about preauthenticated requests?

You cannot edit a pre-authenticated request.

Deleting a pre-authenticated request does not revoke user access to the associated bucket or object.

You need to provide your OCI credentials to the partner company.

Pre-authenticated requests can be used to delete buckets or objects.

NO.32 Which TWO statements are NOTcorrect regarding the Oracle Cloud Infrastructure (OCI) burstable instances?

If the instance’s average CPU utilization over the past 24 hours is below thebaseline, the system allows itto burst above the baseline.

Baseline utilization is a fraction of each CPU core, either 25% or 75%.

Burstable instances cost less than regular instances with the same total OCPU count.

Burstable instances are designed for scenarios where an instance is not typically idle and has high CPUutilization.

Burstable instances are charged according to the baseline OCPU.

NO.33 Your DevOps team needs to interconnect the on-premises network to the Oracle Cloud Infrastructure (OCI) resources, such as a managed database that resides in a private subnet. They indicate that they have a low budget and their bandwidth requirements are minimal, so you decide that a site-to-site VPN is the best option.
They provide you with their router public IP address. You need to create an object in OCI that represents this router. Which object would you create?

Internet Gateway

Dynamic Routing Gateway (DRG)

Customer Premises Equipment (CPE)

Virtual Network Interface Card (vNIC)

IPSec Tunnel

Bastion Host

NO.34 As a network architect you have deployed a public subnet on your Virtual Cloud Network (VCN) with this security list:

You have also created a network security group (NSG) as shown in the table here, and assigned it to your bastion host:

You have confirmed that routing is correct but when you SSH to the VM from your home over the Internet you are unable to connect.
What could be the problem?

User will be able to SSH to the VM from the Internet as SSH is open on the NSG.

Public subnet does not have a route rule to the Internet Gateway.

Internet traffic should be allowed only on the NSG.

SSH traffic is not allowed in the security list nor on the NSG from the Internet.

NO.35 When creating an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) with the VCN wizard, which THREE gateways are created automatically?

Internet Gateway

Local Peering Gateway

Dynamic Routing Gateway

NAT Gateway

Storage Gateway

Bastion Host

Service Gateway

NO.36 Which tool provides a diagram of the implemented topology of all Virtual Cloud Networks (VCNs) in a selected region and tenancy?

Network Watcher

Traffic Analytics

VCN Flow Logs

Network Visualizer

NO.37 You created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain applicationservers and the third subnet contains a DB System. The application requires a shared file system, therefore youhave provisioned one using the file storage service (FSS).
You have also created the corresponding mount target in one of the application subnets. The VCN security listsare properly configured so that the application servers can access FSS. The securityteam changed the settings forthe DB System to have read-only access to the file system. However when they testit, they are unable to accessFSS.
How would you allow access to FSS?

Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DBSystem subnet.

Create an instance principal for the DB System. Write an Identity andAccess Management (IAM) policythat allows the instance principal read-only access to the file storage service.

Modify the security list associated with the subnet where the mount target resides. Change the ingressrules corresponding to the DB System subnet to be stateless.

Modify the security list associated with the subnet where the mount target resides.

Change the ingress rules corresponding to the DB System subnet to be stateful.

NO.38 You are using the Oracle Cloud Infrastructure (OCI) Vault service to create and manage Secrets. For your databasepassword, you have created a secret and rotated the secret one time. The secret versions are as follows:
Version Number | Status
—————————————–
2 (latest) | Current
1 | Previous
You later realize that you have made a mistake in updating the secret content for version 2 and want to rollback to version 1.
What should you do to rollback to version 1?

Deprecate version 2 (latest). Create new Secret version 3. Create soft link from version 3 to version 1.

Create a new secret version 3 and set to Pending. Copy the content of version 1 into version 3.

From the version 2 (latest) menu, select “Rollback” and select version 1 when given the option.

From the version 1 menu on the OCI console, select “Promote to Current”.

NO.39 You have an instance running in Oracle Cloud Infrastructure (OCI) that cannot be live-migrated during an infrastructure maintenance event. OCI schedules a maintenance due date within14 to 16 days and sends you anotification.
What would happen if you choose not to proactively reboot the instance beforethe scheduled maintenance duedate?

The instance will get terminated.

The instance is either reboot-migrated or rebuilt in place for you.

You will receive another notification to reboot within the next 14 days.

You will receive another notification to reboot within the next 7 days.

NO.40 You plan to launch a VM instance with the VM.Standard2.24 shape and Oracle Linux 8 platform image. You want to protect your VM instance from low-level threats, such as rootkits and bootkits that can infect the firmware and operating system and are difficult to detect.
What should you do?

Use in-transit encryption.

Use Vulnerability Scanning Service.

Create a burstable instance.

Create a shielded instance.

NO.41 When defining a query for metric data in Monitoring, which field provides the time window for aggregatingmetric data points plotted on the metric chart?

Dimension

Namespace

Statistic

Interval

NO.42 Which Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) policy is invalid?

Allow dynamic-group FrontEnd to manage instance-family in compartment Project-A

Allow any-user to inspect users in tenancy

Allow group A-Developers to create volumes in compartment Project-A

Allow group A-Admins to manage all-resources in compartment Project-A

Oracle 1z0-1072-23 Exam Syllabus Topics:

Topic	Details
Topic 1	Implement and manage Virtual Cloud Networks Describe and configure a layer-4 Network Load Balancer
Topic 2	Describe Public and Private DNS zones Configure Cloud Guard, Security Zone, and Security Advisor
Topic 3	Describe public and private IP addresses and virtual NICs Understand Network Command Center Services
Topic 4	Describe OCI compute image options Configure DNS and Traffic Management
Topic 5	Understand Observability and Management platform Configure Dynamic Groups and Tag based access control
Topic 6	Understand File System Snapshots and Cloning Describe and Configure Web Application Firewall and Certificates
Topic 7	Configure Security Lists and Network Security Groups Describe and configure OS Management
Topic 8	Configure Volume Groups, Backups, Clones Implement conditional and advanced policies
Topic 9	Understand Block Volume performance tiers Understand Object Storage replication
Topic 10	Configure and manage Object Storage Understand File System usage and metering