Based on Official Syllabus Topics of Actual Oracle 1Z0-1072-20 Exam [Q12-Q31]

Rate this post

Based on Official Syllabus Topics of Actual Oracle 1Z0-1072-20 Exam

Free 1Z0-1072-20 Dumps are Available for Instant Access

Oracle 1Z0-1072-20 Exam Syllabus Topics:

Topic	Details
Topic 1	Describe the components of Compute service, including shapes, images, and custom images Set up a Load Balancer
Topic 2	Architect High Availability and Disaster Recovery solutions Apply core Identity and Access Management components
Topic 3	Use advanced database features, such as Dataguard, BYOL, Data encryption, RAC, and EXADATA
Topic 4	Architect High Availability (HA) using Explain resource locations
Topic 5	Troubleshoot options using console connections and boot volume Discuss Load Balancer terminology and concepts

NEW QUESTION 12
You want an Oracle Cloud Infrastructure (OCI) compute instance in your compartment to make API calls to other services within OCI without storing credentials in a configuration file.
What do you need to do?

Create a dynamic group with appropriate matching rules to include the instance, and reference this group in your IAM policy statement

Instances cannot access services outside their compartment

VM instances are treated as users. Create a user, assign the user to that VM instance, and reference the instance in your Identity and Access Management (IAM) policy statement

By default, all VM instances are created with an instance principal. Reference this instance principal in your IAM policy statement

NEW QUESTION 13
Which two statements are true when Oracle Data Guard is configured (using the Console) between two Virtual Machine DB Systems deployed in Oracle Cloud Infrastructure? (Choose two.)

Primary is a 1-node RAC DB system and Standby is a 2-node RAC DB system.

Primary is a 2-node RAC DB system and Standby is a 2-node RAC DB system.

Primary is a 1-node RAC DB system and Standby is a 1-node RAC DB system.

Primary is a 2-node RAC DB system and Standby is a 1-node RAC DB system.

Primary is a Bare Metal DB system and Standby is a 1-node RAC DB system.

NEW QUESTION 14
You are designing a networking infrastructure in multiple Oracle Cloud Infrastructure regions and require connectivity between workloads in each region. You have created a dynamic routing gateway (DRG) and a remote peering connection. However, your workloads are unable to communicate with each other.
What are two reasons for this? (Choose two.)

The security lists associated with subnets in each virtual cloud network (VCN) do not have the appropriate ingress rules

Identity and Access Management (IAM) policies have not been defined to allow connectivity across the two VCNs in different regions

A local peering gateway needs to be created in each VCN with a default route rule added in the route table forwarding the traffic to the local peering gateway

An Internet gateway needs to be created in each VCN with a default route rule added in the route table forwarding the traffic to the Internet Gateway

The route table associated with subnets in each VCN do not have a route rule defined to forward the traffic to their respective DRGs

NEW QUESTION 15
Which two are required to create an IPSec VPN connection? (Choose two.)

security list

static route CIDR

name

compute instance

NEW QUESTION 16
You deployed a web server in Oracle Cloud Infrastructure using an ephemeral public IP. After a few changes in your web server configuration, you rebooted the server and a new public IP was associated to your instance.
What should you do to prevent this from happening again?

Create a reserved public IP and associate it with the security list that your complete instance is using

Create a reserved public IP and associate it with the subnet of your compute instance

Create a reserved public IP and associate it with the VNIC of your compute instance

Create a reserved public IP and associate it with the hosts file of your web server

NEW QUESTION 17
Which two statements are true about Autonomous Data Warehouse (ADW) backup?

You can perform manual backups to OCI object storage in addition to automated backups available on ADW

You can backup ADW database only to a standard bucket type in OCI object storage

Oracle Cloud Infrastructure (OCI) recommends backing up ADW databases manually to on-premises storage devices

You must backup ADW database to object storage bucket named ADW_backup

NEW QUESTION 18
Which statement is true about Data Guard Implementation in DB systems?

Both DB systems must be in the same compartment, and they must be the same shape

You can define the backup window and set custom backup retention period for the automatic database backup schedule.

You cannot manage Oracle database initialization parameters at a global level.

You cannot manage the database as sys/sysdba.

NEW QUESTION 19
You have an Oracle Cloud Infrastructure (OCI) load balancer distributing traffic via an evenly-weighted round robin policy to your backend web servers. You notice that one of your web servers is receiving more traffic than other web servers.
How can you resolve this imbalance?

Check security lists and route tables of your virtual cloud network (VCN) and fix any issues associated with the rules

Create separate listeners for each backend web server

Delete and re-create your OCI load balancer

Disable session persistence on your backend set

NEW QUESTION 20
Which statement is true about Oracle Cloud Infrastructure (OCI) object storage support for server-side encryption?

You must manually enable server-side encryption for each object as you upload to OCI object storage

Objects are automatically encrypted as they are uploaded to object storage and decrypted upon retrieval

You must manually decrypt the data when retrieving from OCI object storage

Only the object data is encrypted and the user-defined metadata that is associated with the object is not encrypted

NEW QUESTION 21
Which two Oracle Cloud Infrastructure database services allow you to dynamically both scale CPU and storage? (Choose two.)

bare metal DB system

virtual machine DB system

Autonomous Data Warehouse (ADW)

Autonomous Transaction Processing (ATP)

NEW QUESTION 22
Which two statements are true about Oracle Cloud Infrastructure (OCI) DB Systems Data Guard service?

Both DB systems must use the same VCN, and port 1521 must be open

Data guard configuration on the OCI is limited to a virtual machine only

Data guard implementation for Bare Metal shapes requires two DB Systems, one containing the primary database and one containing the standby database.

Data guard implementation requires two DB Systems, one running the primary database on a virtual machine and the standby database running on bare metal.

NEW QUESTION 23
Which two options are true for Autonomous Transaction Processing (ATP) database? (Choose two.)

You can add/remove Diskgroup in ATP

You can scale storage up or down in ATP

You can scale CPU up or down in ATP

You can add more Pluggable Database for consolidating multiple databases in ATP

You can add new ORACLE_HOME for bringing older versions of on-premises databases to ATP

NEW QUESTION 24
A company currently uses Microsoft Active Directory as its identity provider. The company recently subscribed to Oracle Cloud Infrastructure (OCI) to leverage the cloud platform for test and development. As the administrator, you configured the OCI tenancy to be federated with Microsoft Active Directory. Now you need to give access to developers so that they can start creating resources in their OCI accounts.
Which step will you perform to make sure you are not duplicating user creation inside of OCI tenancy?

Create a group for developers on OCI and map the group to a similar group in Microsoft Active Directory during the federation process.

Create a new user account in OCI for each user, and then create policies to provide access to developers.

Create a group for developers on OCI, export all the developers from Microsoft Active Directory, and then import them into the Identity and Access Management (IAM) group.

Create a single user account in OCI, and then create policies to provide access to developers to this single account.

NEW QUESTION 25
When terminating a compute instance, you want to preserve the boot volume and its data.
Which step will you need to perform?

You cannot preserve the boot volume; it will always be deleted when you terminate the instance.

Reboot the instance first, and then terminate the instance.

Disable the default option to delete the boot volume when terminating an instance.

Before terminating the instance, you must detach the boot volume.

NEW QUESTION 26
You have been notified of an application failure indicating that one or more of the Oracle Cloud Infrastructure (OCI) resources have become unavailable. After scanning the Compute and Database consoles, you notice that one of the DB Systems is missing.
What would you do to identify the reason for this missing resource?

Navigate to the Audit console and search the previous 24 hours for all DELETE request actions to get a list of any resource that was deleted in the past 24 hours.

Navigate to the Audit console and search the previous 24 hours for all the GET request actions to get a list of every event that occurred in the past 24 hours.

View the service limits associated with your account to ensure that you have not exceeded the allowable number of DB Systems in your tenancy.

Create a serial console connection to the DB System that does not appear in the management console. Connect to the serial console connection, and then review the system logs under /var/log/messages.

NEW QUESTION 27
You are working for a financial institution that is currently running two web applications in Oracle Cloud Infrastructure (OCI). All resources were created in the root compartment.
Your manager asked you to deploy new resources to support a proof-of-concept (PoC) for Oracle FlexCube.
You must ensure that the FlexCube resources are secured and cannot be affected by the team that manages the two web applications.
Which two tasks should you complete to ensure the required security of your resources? (Choose two.)

Create a new compartment for the two web applications and move the existing resources into the compartment. Deploy the FlexCube application into the root compartment. Create a new policy in the root compartment that gives the FlexCube project team the ability to manage all resources in the tenancy.

Create a new policy in the root compartment for the FlexCube project team. Assign a policy statement that grants the FlexCube project team the ability to manage all resources in the tenancy, where a specific tag key and tag value are present.

Create a Tag Default within the root compartment with a default value of ${iam.principle.name} so that each new resource created is tagged with the name of the person who created it. Create a new IAM policy that allows users to only modify resources they created.

Create a new compartment for the two web applications and move the existing resources into this compartment. Modify the existing policy for the team that manages these applications so that the scope of access is defined as this new compartment.

Create a new compartment for the FlexCube application deployment. Create a policy in this compartment for the project team that gives them the ability to manage all resources within the scope of this compartment.

NEW QUESTION 28
You created a public subnet and an internet gateway in your virtual cloud network (VCN) of Oracle Cloud Infrastructure. The public subnet has an associated route table and security list. However, after creating several compute instances in the public subnet, none can reach the Internet.
Which two are possible reasons for the connectivity issue? (Choose two.)

The route table has no default route for routing traffic to the internet gateway.

There is no stateful egress rule in the security list associated with the public subnet.

There is no dynamic routing gateway (DRG) associated with the VCN.

There is no stateful ingress rule in the security list associated with the public subnet.

A NAT gateway is needed to enable the communication flow to internet.

An internet gateway as an optional virtual router that connects the edge of the VCN with the internet. To use the gateway, the hosts on both ends of the connection must have public IP addresses for routing. Connections that originate in your VCN and are destined for a public IP address (either inside or outside the VCN) go through the internet gateway. Connections that originate outside the VCN and are destined for a public IP address inside the VCN go through the internet gateway.
Working with Internet Gateways
You create an internet gateway in the context of a specific VCN. In other words, the internet gateway is automatically attached to a VCN. However, you can disable and re-enable the internet gateway at any time. Compare this with a dynamic routing gateway (DRG), which you create as a standalone object that you then attach to a particular VCN. DRGs use a different model because they’re intended to be modular building blocks for privately connecting VCNs to your on-premises network.
For traffic to flow between a subnet and an internet gateway, you must create a route rule accordingly in the subnet’s route table (for example, destination CIDR = 0.0.0.0/0 and target = internet gateway). If the internet gateway is disabled, that means no traffic will flow to or from the internet even if there’s a route rule that enables that traffic. For more information, see Route Tables.
For the purposes of access control, you must specify the compartment where you want the internet gateway to reside. If you’re not sure which compartment to use, put the internet gateway in the same compartment as the cloud network. For more information, see Access Control.
You may optionally assign a friendly name to the internet gateway. It doesn’t have to be unique, and you can change it later. Oracle automatically assigns the internet gateway a unique identifier called an Oracle Cloud ID (OCID). For more information, see Resource Identifiers.
To delete an internet gateway, it does not have to be disabled, but there must not be a route table that lists it as a target.
AS per compute instances can connect to the Internet so you use egress no ingress

NEW QUESTION 29
You have two line of business operations (LOB1, LOB2) leveraging Oracle Cloud Infrastructure. LOB1 is deployed in VCN1 in the OCI US East region, while LOB2 is deployed in VCN2 in the US West region. You need to peer VCN1 and VCN2 for disaster recovery and data backup purposes. To ensure you can utilize the OCI Virtual Cloud Network remote peering feature, which CIDR ranges should be used?

VCN1 (10.0.0.0/16) and VCN2 (10.0.1.0/24)

VCN1 (10.0.0.0/16) and VCN2 (172.16.0.0/16)

VCN1 (172.16.1.0/24) and VCN2 (172.16.1.0/27)

VCN1 (192.168.0.0/16) and VCN2 (192.168.1.0/27)

NEW QUESTION 30
You are designing a two-tier web application in Oracle Cloud Infrastructure (OCI). Your clients want to access the web servers from anywhere, but want to prevent access to the database servers from the Internet.
Which is the recommended way to design the network architecture?

Create public subnets for web servers and private subnets for database servers in your virtual cloud network (VCN), and associate separate internet gateways for each subnet.

Create public subnets for web servers and associate a dynamic routing gateway with that subnet, and a private subnet for database servers with no association to dynamic gateway.

Create public subnets for web servers and private subnets for database servers in your VCN, and associate separate security lists and route tables for each subnet.

Create a single public subnet for your web servers and database servers, and associate only your web servers to internet gateway.

NEW QUESTION 31
Which two configuration formats does Terraform support? (Choose two.)

YAML

JSON

HCL

XML