Check the Available 1z0-1072-23 Exam Dumps with 57 QA’s UPDATED 2023 [Q24-Q42]

1z0-1072-23 Oracle

admin -

October 22, 2023

4/5 - (1 vote)

Check the Available 1z0-1072-23 Exam Dumps with 57 QA’s UPDATED 2023

Download 1z0-1072-23 Exam Dumps Questions to get 100% Success in Oracle

NO.24 You just got a last minute request to create a set of instances in Oracle Cloud Infrastructure (OCI). The configuration and installed software are identical for every instance, and you already have a running instance in your OCI tenancy. Which image option allows you to achieve this task with the least amount of effort?

Bring your own image and use it as a template for the new instances.

Select an image from the OCI Marketplace.

Use Oracle-provided images and customize the installation using a third-party tool.

Create a custom image and use it as a template for the new instances.

Creating a custom image and using it as a template for the new instances is the option that allows you to achieve this task with the least amount of effort. A custom image is a copy of an existing instance that you can use to launch other instances with the same configuration and installed software. The other options are not suitable for this scenario, as they would require more time and effort to create and customize the instances. Reference: [Custom Images]

NO.25 A financial firm is designing an application architecture for its online trading platform that should have high availability and fault tolerance.
Their solutions architects configured the application to use an Oracle Cloud Infrastructure (OCI) Object Storagebucket located in the US West (us-phoenix-1) region to store large amounts of financial data. The stored financialdata in the bucket should not be impacted even if there is an outage in one of the Availability Domains or a complete region.
What should the architect do to avoid any costly service disruptions and ensure data durability?

Create a replication policy to send data to a different bucket in another OCI region.

Copy the Object Storage bucket to a block volume.

Create a lifecycle policy to regularly send data from the Standard to Archive storage.

Create a new Object Storage bucket in another region and configure lifecycle policy to move data every
5days.

Explanation
Create a replication policy to send data to a different bucket in another OCI region. The explanation is that replication is a feature of Object Storage that allows you to automatically copy objects from one bucket to another bucket, either in the same region or in a different region. Replication can help you improve data availability and durability, as well as meet compliance and disaster recovery requirements. To enable replication, you need to create a replication policy that specifies the source and destination buckets, the replication frequency, and the replication filters. Replication policies are evaluated every five minutes and copy any new or updated objects from the source bucket to the destination bucket.

NO.26 Company XYZ is spending $300,000.00 USD per month in egress fees for 7 Petabytes that they consume for Outbound Data Transfer in North America with their current cloud provider. The company is seeking to lower that expense considerably without reducing consumption. You propose migration to OCI because the Gigabyte Outbound Data Transfer in North America costs just $0.0085 USD per month. With OCI, how much will they spend per month for 7 Petabytes of Outbound Data Transfer? (1 Petabyte = 1000 Terabytes)

$59,500.00

$150,000.00

$59,415.00

$0.00 (free with OCI)

Explanation
$59,415.00 is the amount that Company XYZ will spend per month for 7 Petabytes of Outbound Data Transfer in North America with OCI. This is calculated by multiplying 7 Petabytes by 1000 Terabytes (to convert Petabytes to Terabytes), then multiplying by $0.0085 USD (the cost per Gigabyte Outbound Data Transfer in North America), then dividing by 1000 (to convert Gigabytes to Terabytes). The formula is:
(7 * 1000 * 0.0085) / 1000 = $59,415.00

NO.27 As your company’s cloud architect, you have been invited by the CEO to join his staff meeting. They want your input on interconnecting Oracle Cloud Infrastructure (OCI) to another cloud provider in London, with some specific requirements:
* They want resources in the other cloud provider to leverage OCI Autonomous Data Warehouse ML capabilities.
* The connection between OCI and the other cloud provider should be provisioned as quickly as possible.
* The connection should offer high bandwidth and predictable performance.
Which other cloud provider should you recommend to interconnect with OCI and meet the above requirements?

IBM Cloud

Google Cloud

OCI

Microsoft Azure

Digital Ocean

Amazon Web Services

Alibaba Cloud

The explanation is that Microsoft Azure is one of the cloud providers that has an interconnect location with OCI in London. This means that you can use OCI FastConnect to establish a private and dedicated connection between OCI and Azure in London, with high bandwidth and predictable performance. This connection can also enable you to leverage OCI Autonomous Data Warehouse ML capabilities from Azure resources, as you can access OCI services across regions using private IP addresses. The interconnect location can be provisioned quickly using the OCI and Azure consoles or APIs.

NO.28 Which TWO components are optional while creating the Monitoring Query Language (MQL) expressions in the Oracle Cloud Infrastructure (OCI) Monitoring service?

Interval

Statistic

Dimensions

Grouping Function

Metric

Explanation
Dimensions and Grouping Function are two optional components while creating the Monitoring Query Language (MQL) expressions in the OCI Monitoring service. Dimensions are key-value pairs that provide additional information about a metric, such as region, compartment, or resource type. Grouping Function is a function that aggregates metric data across one or more dimensions, such as sum, count, or average. The other options are required components for MQL expressions. References: [Dimensions], [Grouping Function]

NO.29 Which THREE capabilities are available with the Oracle Cloud Infrastructure (OCI) DNS service?

Creating and managing records

Creating and managing WAF rules

Creating and managing Identity Access Management (IAM) policies

Creating and managing zones

Viewing all zones

Creating and managing security lists

Creating and managing records, creating and managing zones, and viewing all zones are three capabilities that are available with the OCI DNS service. Records are data elements that map domain names to IP addresses or other information. Zones are collections of records that correspond to a domain name or a subdomain name. The OCI DNS service allows users to create and manage records and zones for their domains or subdomains, as well as view all zones in their tenancy. The other options are not capabilities of the OCI DNS service, but of other OCI services such as WAF, IAM, and Networking. Reference: [DNS Service], [Records], [Zones]

NO.30 You have three compartments: ProjectA, ProjectB, and ProjectC. For each compartment, there is an admin group set up: A-Admins, B-Admins, and C-Admins.
Each admin group has full access over their respective compartments as shown in the graphic below.
Your organization has set up a tag namespace, EmployeeGroup.Role and all your admin groups are tagged with a value of ‘Admin’.

You want to set up a Test compartment for members of the three projects to share. You also need to provide admin access to all three of your existing admin groups.
Which policy would you write to accomplish this task?

Allow all-group to manage all-resources in compartment Test where
request.principal.group.tag.EmployeeGroup.Role=’Admin’

Allow dynamic-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role=’Admin’

Allow group any-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role=’Admin’

Allow any-user to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role=’Admin’

Allow all-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role=’Admin’ is the policy that would accomplish this task. This policy grants admin access to all groups that have the tag EmployeeGroup.Role=’Admin’ in the compartment Test. The other options are not correct, as they use incorrect terms such as dynamic-group, any-group, or any-user. Reference: [Tag-Based Authorization]

NO.31 You have a block volume created in the US West (Phoenix) region. You enabled Cross Region Replication for thevolume and selected US West (San Jose) as the destination region. Now, you would like to create a new volumefrom the volume replica in the US West (San Jose) region.
What should you do?

Activate the replica.

Trigger the replica.

No action required. By default, the replica is available as a block volume.

Initiate the replica.

Explanation
The explanation is that when you enable Cross Region Replication for a block volume, Object Storage creates a replica of the volume in another region of your choice. The replica is not available as a block volume until you activate it. To activate a replica, you need to select the replica from the Block Storage console and click Activate Replica. This will create a new block volume from the replica in the destination region.

NO.32 Oracle Cloud Agent is a lightweight process that manages plugins running on compute instances.
Which is NOT a valid Oracle Cloud Agent plugin name?

Live Migration Agent

OS Management Service Agent

Compute Instance Run Command

Bastion

Explanation
Bastion is not a valid Oracle Cloud Agent plugin name. Bastion is a service that enables secure and controlled access to compute instances in OCI. The other options are valid plugin names that provide different functionalities for the instances. References: [Bastion], [Cloud Agent Plugins]

NO.33 You are part of a team that manages a set of workload instances running in an on-premises environment.
TheArchitect team is tasked with designing and configuring Oracle Cloud Infrastructure (OCI) Logging service tocollect logs from these instances. There is a requirement to archive Info-level logging data of these instances intothe OCI Object Storage.
Which TWO features of OCI can help you achieve this?

Cloud Agent Plugin

Grouping Function

Service Connectors

Agent Configuration

ObjectCollectionRule

Explanation
Cloud Agent Plugin and Service Connectors are two features of OCI that can help collect logs from on-premises instances and archive them into OCI Object Storage. Cloud Agent Plugin is a component of the OCI Logging service that can be installed on any Linux or Windows instance to collect logs and send them to OCI. Service Connectors are components of the OCI Service Connector Hub that can transfer data between different OCI services, such as Logging and Object Storage. The other options are not relevant for this requirement. References: [Cloud Agent Plugin], [Service Connectors]

NO.34 In which TWO ways does Cloud Guard help improve the overall security posture for your tenancy?

Monitors unauthorized or suspicious user activity.

Allows you to centrally manage encryption keys.

Prevents you from creating misconfigurations on your resources in Oracle Cloud Infrastructure (OCI).

Masks sensitive data and monitors security controls on your Oracle databases.

Helps detect misconfigured resources, such as publicly accessible Object Storage buckets, instances, and restricted ports on security lists.

Explanation
Monitors unauthorized or suspicious user activity, prevents you from creating misconfigurations on your resources in OCI, and helps detect misconfigured resources, such as publicly accessible Object Storage buckets, instances, and restricted ports on security lists. The explanation is that Cloud Guard is a service that helps you improve the security posture of your tenancy by providing visibility into your cloud resources, identifying security misconfigurations and threats, and taking corrective actions to remediate them. Cloud Guard monitors user activity and resource configurations using data collectors and detectors, evaluates them against predefined or custom rules, generates problems and recommendations based on severity levels, and executes responders to fix the issues automatically or manually.

NO.35 Which tool provides a diagram of the implemented topology of all Virtual Cloud Networks (VCNs) in a selected region and tenancy?

Network Watcher

Traffic Analytics

VCN Flow Logs

Network Visualizer

Explanation
Network Visualizer is the tool that provides a diagram of the implemented topology of all VCNs in a selected region and tenancy. Network Visualizer is a feature of the OCI Networking service that allows users to view and manage their network resources in a graphical interface. It can help users understand their network topology, troubleshoot issues, and optimize performance. The other options are not tools that provide a diagram of the VCN topology, but rather other features or services of OCI Networking. References: [Network Visualizer]

NO.36 You are using a custom application with third-party APIs to manage the application and data hosted in an Oracle Cloud Infrastructure (OCI) tenancy. Although your third-party APIs do not support OCI’s signature-based authentication, you want them to communicate with OCI resources. Which authentication option should you use to ensure this?

Auth Tokens

OCI Username and Password

API Signing Key

SSH Key Pair with 2048-bit algorithm

Auth Tokens is the authentication option that you should use to ensure that your custom application with third-party APIs can communicate with OCI resources. Auth Tokens are tokens that can be used as an alternative to passwords when making API calls to OCI services. Auth Tokens can be generated and revoked by users in the OCI Console or CLI, and can be used with any API client that supports basic authentication. The other options are not suitable for this scenario, as they either require OCI’s signature-based authentication or are not applicable for API calls. Reference: [Auth Tokens]

NO.37 You plan to upload a large file (3 TiB) to Oracle Cloud Infrastructure (OCI) Object Storage. You would like to minimize the impact of network failures while uploading, and therefore you decide to use the multipart upload capability.
Which TWO statements are true about performing a multipart upload using the Multipart Upload API?

You do not need to split the object into parts. Object Storage splits the object into parts and uploads all of the parts automatically.

While a multipart upload is still active, you can keep adding parts as long as the total number is less than 10,000.

You do not have to commit the upload after you have uploaded all the object parts.

When you split the object into individual parts, each part can be as large as 50 GiB.

While a multipart upload is still active, you can keep adding parts as long as the total number is less than 10,000. When you split the object into individual parts, each part can be as large as 50 GiB. The explanation is that a multipart upload allows you to upload a large object in parts, which can improve performance and reliability. You need to split the object into parts yourself and upload each part separately using the Multipart Upload API. You can add parts to an active multipart upload until you reach the maximum number of 10,000 parts per upload. Each part can range from 10 MiB to 50 GiB in size, except for the last part, which can be any size.

NO.38 You have an instance running in Oracle Cloud Infrastructure (OCI) that cannot be live-migrated during an infrastructure maintenance event. OCI schedules a maintenance due date within 14 to 16 days and sends you a notification.
What would happen if you choose not to proactively reboot the instance before the scheduled maintenance due date?

The instance will get terminated.

The instance is either reboot-migrated or rebuilt in place for you.

You will receive another notification to reboot within the next 14 days.

You will receive another notification to reboot within the next 7 days.

If you choose not to proactively reboot the instance before the scheduled maintenance due date, the instance is either reboot-migrated or rebuilt in place for you. Reboot-migration is a process where OCI migrates your instance to a new physical host without changing its configuration or public IP address. Rebuild in place is a process where OCI shuts down your instance, performs maintenance on the physical host, and restarts your instance with the same configuration and public IP address. The other options are not correct. Reference: [Reboot-Migration], [Rebuild in Place]

NO.39 Which tool provides a diagram of the implemented topology of all Virtual Cloud Networks (VCNs) in a selected region and tenancy?

Network Watcher

Traffic Analytics

VCN Flow Logs

Network Visualizer

Network Visualizer is the tool that provides a diagram of the implemented topology of all VCNs in a selected region and tenancy. Network Visualizer is a feature of the OCI Networking service that allows users to view and manage their network resources in a graphical interface. It can help users understand their network topology, troubleshoot issues, and optimize performance. The other options are not tools that provide a diagram of the VCN topology, but rather other features or services of OCI Networking. Reference: [Network Visualizer]

NO.40 Which TWO are key benefits of setting up Site-to-Site VPN on Oracle Cloud Infrastructure (OCI)?

When setting up Site-to-Site VPN, it creates a private connection that provides consistent network experience.

When setting up Site-to-Site VPN, customers can configure it to use static or dynamic routing (BGP).

When setting up Site-to-Site VPN, OCI provisions redundant VPN tunnels.

When setting up Site-to-Site VPN, customers can expect bandwidth above 2 Gbps.

Explanation
When setting up Site-to-Site VPN, customers can configure it to use static or dynamic routing (BGP). When setting up Site-to-Site VPN, OCI provisions redundant VPN tunnels. The explanation is that Site-to-Site VPN is a secure and encrypted connection between your on-premises network and your Virtual Cloud Network (VCN) in OCI over the public internet. When setting up Site-to-Site VPN, you can choose to use static routing or dynamic routing (Border Gateway Protocol or BGP) to exchange routes between your network and OCI.
OCI also provisions two redundant VPN tunnels for each Site-to-Site VPN connection to provide high availability and failover.

NO.41 You are responsible for deploying an application on Oracle Cloud Infrastructure (OCI). The application is memoryintensive and performs poorly if enough memory is not available. You have created an instance pool of Linuxcompute instances in OCI to host the application and defined Autoscaling Configuration for the instance pool.
What should you do to ensure that the instance pool autoscales to prevent poor application performance?

Install OCI SDK on all compute instances and create a script that triggers theautoscaling event if there ishigh memory usage.

Configure the autoscaling policy to monitor memory usage and scale up the number of instances when itmeets the threshold.

Install the monitoring agent on all compute instances, which triggers the autoscaling group.

Configure the autoscaling policy to monitor CPU usage and scale up the number of instances when it meets the threshold

NO.42 You are using a custom application with third-party APIs to manage the application and data hosted in an OracleCloud Infrastructure (OCI) tenancy. Although your third-party APIs do not support OCI’s signature-based authentication, you want them to communicate with OCI resources. Which authentication option should you useto ensure this?

Auth Tokens

OCI Username and Password

API Signing Key

SSH Key Pair with 2048-bit algorithm

Explanation
Auth Tokens is the authentication option that you should use to ensure that your custom application with third-party APIs can communicate with OCI resources. Auth Tokens are tokens that can be used as an alternative to passwords when making API calls to OCI services. Auth Tokens can be generated and revoked by users in the OCI Console or CLI, and can be used with any API client that supports basic authentication.
The other options are not suitable for this scenario, as they either require OCI’s signature-based authentication or are not applicable for API calls. References: [Auth Tokens]

Loading …

Oracle 1z0-1072-23 Exam Syllabus Topics:

Topic	Details
Topic 1	Describe Public and Private DNS zones Configure Cloud Guard, Security Zone, and Security Advisor
Topic 2	Understand Observability and Management platform Configure Dynamic Groups and Tag based access control
Topic 3	Implement and manage Virtual Cloud Networks Describe and configure a layer-4 Network Load Balancer
Topic 4	Configure Volume Groups, Backups, Clones Implement conditional and advanced policies
Topic 5	Describe OCI compute image options Configure DNS and Traffic Management
Topic 6	Configure Virtual Cloud Network Routing and Gateways Describe and configure a layer-7 Load Balancer
Topic 7	Understand Block Volume performance tiers Understand Object Storage replication
Topic 8	Configure Security Lists and Network Security Groups Describe and configure OS Management