[Q14-Q34] Pass 1z0-1067-22 Exam in First Attempt Guaranteed 2024 Dumps!

NEW QUESTION 14
You have been asked to ensure that in-transit communication between an OracleCloud Infrastructure (OCI) compute instance and an on-premises server (192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a DynamicIPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added.
What solution should you recommend? (Choose the best answer.)

The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.

Advertise a 192.168.10.10/32 route over the VPN.

Advertise a 192.168.10.10/32 router over the FastConnect.

The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.

NEW QUESTION 15
You have a web application running on Oracle Cloud Infrastructure (OCI) that lets users log in with a username and password. You notice that an attacker has tried to use SQL comment “–” to alter the database query, remove the password check and log in as a user. You decide to prevent any future attacks.
Which of the following OCI services or features would you choose tosafeguard your application? (Choose the best answer.)

Network Security Group

Data Safe

Web Application Framework (WAF)

Vault

NEW QUESTION 16
You run a large global application with 90% of customers based in the US and Canada. You want to be able to test a new feature and allow a small percentage of users to access the new version of your application.
What Oracle Cloud Infrastructure Traffic Management steering policy should you utilize? (Choose the best answer.)

Load Balancer

IP Prefix steering

ASN steering

Geolocation steering

NEW QUESTION 17
You havecreated a geolocation steering policy in the Oracle Cloud Infrastructure (OCI) Traffic Management service, with this configuration:

What happens to requests that originate in Africa? (Choose the best answer.)

The traffic will be forwarded at the same time to both Pool 1 and Pool 2.

The traffic will be dropped.

The traffic will be forwarded randomly to any of the pools mentioned in the rules.

The traffic will be forwarded to Pool 1. If Pool 1 is not available, then it will be forwarded toPool 2.

NEW QUESTION 18
You have ordered two FastConnect connections that provide a high availability connection architecture between your on-premises data center and Oracle Cloud Infrastructure (OCI). You want to run these connections in an ACTIVE/PASSIVE architecture.
How can you accomplish this? (Choose the best answer.)

Decrease the prefix length of AS for the FastConnect you want touse as PASSIVE connection.

Enable BGP on the FastConnect that you want as the ACTIVE connection.

Use AS PATH prepending with your routes.

Adjust one of the connections to have a higher ASN.

NEW QUESTION 19
You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:

You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet.
Which actionwould you take to accomplish the task? (Choose the best answer.)

Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the public subnet that hosts the company website.

In default security list,add a stateful rule to allow ingress access on port 443.

Create a new security list with a stateful rule to allow ingress access on port 443 and associate it to the public subnet.

Create a network security group, add a stateful rule to allow ingressaccess on port 443 and associate it to the instance that hosts the company website.

NEW QUESTION 20
Multiple teams are sharing a tenancy in OracleCloud Infrastructure (OCI). You are asked to figure out an appropriate method to manage OCI costs.
Which is NOT a valid technique to accurately attribute costs to resources used by each team? (Choose the best answer.)

Create a Cost-Tracking tag. Apply this tag to all resources with team information. Use the OCI cost analysis tools to filter costs by tags.

Create separate compartment for each team. Use the OCI cost analysis tools to filter costs by compartment.

Create an Identity and Access Management (IAM) group for each team. Create an OCI budget for each group to track spending.

Define and use tags for resources used by each team. Analyze usage data from the OCI Usage Report which has detailed information about resources and tags.

NEW QUESTION 21
You are using Oracle CloudInfrastructure (OCI) console to set up an alarm on a budget to track your OCI spending.
Which two are valid targets for creating a budget in OCI? (Choose two.)

Select group as the type of target for your budget.

Select Tenancy as the type of targetfor your budget.

Select user as the type of target for your budget.

Select Cost-Tracking Tags as the type of target for your budget.

Select Compartment as the type of target for your budget.

NEW QUESTION 22
You are using the Oracle Cloud Infrastructure Command Line Interface to launch a Linux virtual machine.
You enter the following command (with correct values for all parameters):

The command fails.
Which is NOT a valid parameter in this command? (Choose the best answer.)

-t <tenancy_id>

– -image-id <image_id>

– -shape “<shape_name>”

-c<compartment_id>

– -subnet-id <subnet_id>

NEW QUESTION 23
You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG:
NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:

However, after checking the bastion host logs, you discovered that there areIP addresses other than your own that can access your bastion host.
What is the root cause of this issue? (Choose the best answer.)

The Security List allows access to all IP address which overrides the Network Security Group ingress rules.

Allcompute instances associated with NSG-050504 are also able to connect to the bastion host.

The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.

A netmask of /32 allows all IP address in the 140.19.2.0 network, other thanyour IP 140.19.2.140

NEW QUESTION 24
You have a 750 MIB file in an Oracle Cloud Infrastructure (OCI)Object Storage bucket. You want to download the file in multiple parts to speed up the download using the OCI CLI. You also want to configure each part size to be 128 MIB.
Which is the correct OCI CLI command for this operation? (Choose the best answer.)

oci os object get -ns my-namespace -bn my-bucket –name my-large-object — multipart-download-threshold 750 –parallel-download-count 128

oci os object download -ns my-namespace -bn my-bucket –name my-large-object — multipart-download-threshold 750 –parallel-download-count 128

oci os object download -ns my-namespace -bn my-bucket –name my-large-object — resume-put
–multipart-download-threshold 500 –part-size 128

oci os object get -ns my-namespace -bn my-bucket –name my-large-object
–multipart-download-threshold 500 –part-size 128

NEW QUESTION 25
You have been asked to update the lifecycle policy for object storage using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI).
Which command can successfully update the policy? (Choose the bestanswer.)

oci os object-lifecycle-policy delete -ns <object_storage_namespace> -bn <bucket_name>

oci os object-lifecycle-policy put -ns <object_storage_namespace> -bn <bucket_name>

oci os object-lifecycle-policy put -ns <object_storage_namespace> -bn <bucket_name> – -items
<json_formatted_lifecycle_policy>

oci os object-lifecycle-policy get -ns <object_storage_namespace> -bn <bucket_name>

NEW QUESTION 26
You have recently been asked to take over management of your company’s infrastructure provisioning efforts, utilizing Terraform v0.12 to provision and manage infrastructure resources in Oracle Cloud Infrastructure (OCI). For the past fewdays the development environments have been failing to provision. Terraform returns the following error:

You locate the related code block in the Terraform config and find the following:

Which correction should you make to solve this issue? (Choosethe best answer.)

Place a command at the end of line 16

Modify line 15 to be the following:
tcp_options = {min = “22”, max = “22”)

Modify line 15 to be the following:
tcp_options { min = “22”
max = “22”
}

Replace the curly braces ‘{ }’ inlines 11 and 16 with square braces ‘[ ]’

NEW QUESTION 27
What is a key benefit of using Oracle Cloud Infrastructure’s Resource Manager for your Terraform provisioning and management activities? (Choose the best answer.)

You can useResource Manager to apply patches to all existing Oracle Linux interfaces in a specified compartment.

Resource Manager has administrative privileges by design. Even if your IAM user does not have access, you can leverage Resource Manager to provision new resources to any compartment in the Tenancy.

You can use Resource Manager to identify and maintain an inventory of all Compute and Database instances across your tenancy.

Resource Manager manages to Terraform state file for your infrastructure andlocks the file so that only one job at a time can run on a given stack.

NEW QUESTION 28
You have created the following JSON file to specify a lifecycle policy for one of your object storage buckets:

How will this policy affect the objects that are stored in the bucket? (Choose the best answer.)

Objects with the prefix “LOGS” will be retained for 120 days and then deleted permanently.

Objectscontaining the name prefix LOGS will be automatically migrated from standard Storage to Archive storage 30 days after the creation date. The object will be deleted 120 days after creation.

The objects with prefix “LOGS” will be deleted 30 days after creation date.

Objects containing the name prefix LOGS will be automatically migrated from standard Storage to Archive storage 30 days after the creation date. The object will be migrated back to standard Storage
120 days after creation.

NEW QUESTION 29
You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.

The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the computeinstance from the internet. However, you are not able to connect to the web server using your web browser.

Which step will resolve the issue? (Choose the best answer.)

In the route table, add a rule for your default traffic to be routed to NAT gateway.

In the security list, add an ingress rule for port 80 (http).

In the security list, remove the ssh rule.

In the route table, add a rule for your default traffic to be routed to service gateway.

NEW QUESTION 30
Your company recently adopted a hybrid cloud architecture which requires them to migrate some of their on- premises web applications to Oracle Cloud Infrastructure (OCI). You created a Terraform template which automatically provisions OCI resources such as compute instances, load balancer, and a database instance.
After running the stackusing the terraform apply command, it successfully launched the compute instances and the load balancer, but it failed to create a new database instance with the following error:
Service error: NotAuthorizedOrNotFound. shape VM.Standard2.4 not found. httpstatus code: 404 You discovered that the resource quotas assigned to your compartment prevent you from using VM.Standard2.4 instance shapes available in your tenancy. You edit the Terraform script and replace the shape with VM.Standard2.2 Which option would you recommend to re-run the terraform command to have required OCI resources provisioned with the least effort? (Choose the best answer.)

terraform plan -target=oci_database_db_system.db_system

terraform apply -auto-approve

terraform refresh-target=oci_database_db_system.db_system

terraform apply -target=oci_database_db_system.db_system

NEW QUESTION 31
One of the compute instances that you have deployed on Oracle Cloud Infrastructure (OCI) is malfunctioning.
You have created a console connection to remotely troubleshoot it.
Which two statements about console connections are TRUE? (Choose two.)

It is not possible to use VNC console connections to connect to Bare Metal Instances.

VNC console connection uses SSH port forwarding to create a secure connection from your local system to the VNC server attached to your instance’s console.

It is not possible to connect to the serial console to an instance running Microsoft Windows, however VNC console connection can beused.

For security purpose, the console connection will not let you edit system configuration files.

If you do not disconnect from the session, your serial console connection will automatically be terminated after 24 hours.

NEW QUESTION 32
Which statement about Oracle Cloud Infrastructure paravirtualized block volume attachments is TRUE?
(Choose the best answer.)

Paravirtualized volumes may reduce the maximum IOPS performance for larger block volumes.

Paravirtualized is required to manage iSCSI configuration for virtual machine instances.

Paravirtualized volumes become immediately available on bare metal compute instances.

Paravirtualization utilizes the internal storage stack of compute instance OS and network hardware virtualization to access block volumes.

NEW QUESTION 33
You have recently joined a startup company and quickly find that nobody is tracking the amount of money spent on Oracle Cloud Infrastructure (OCI). Seeing an opportunity to help save money you begin creating a solution tobetter track the cost of resources provisioned by each individual on the team.
Which option allows you to identify excessive spend across all resources in your tenancy? (Choose the best answer.)

Use the Python SDK to write a custom application thatwill monitor the Audit log. Look for CREATE events and configure the application to send you an email each time a new resource is created.

Create a tag namespace named BILLING with a Tag Key named CostCenter. Tag each of your resources with this Tag Keyand the correct value.

Use the Events Service and create rules that will act when a new Object Storage bucket or Compute Instance has been created. Have the rule email you each time one of these events occurs.

Create a budget for each compartment that will send a notification when monthly spend reaches a pre- defined amount.

NEW QUESTION 34
You have been asked to set up connectivity between a client’s on-premises network and Oracle Cloud Infrastructure (OCI). The requirements are:
Low latency: The applications are financial and require low latency connectivity intoOCI. Consistency: The application isn’t tolerant of performance variation.
Performance: The communications link needs to support up to 1.25 Gbps.
Encryption: The communications link needs to encrypt any data in transit between the on-premises network and OCI Virtual Cloud Network (VCN).
The client wants to implement the above with as low a cost as possible, while meeting all of the requirements.
What should you suggest? (Choose the best answer.)

Provision FastConnect with a single private virtualcircuit, and run an IPsec VPN tunnel over the top of this virtual circuit.

Provision FastConnect with a single public virtual circuit.

Provision a site-to-site IPsec VPN between your on-premises network and your virtual cloud network (VCN) using VPNConnect.

Provision FastConnect with a single private virtual circuit.

Provision FastConnect with a single public virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.