1Z0-1067-21 Online Practice Questions and Answers

You have been asked to set up connectivity between a client's on-premises network and Oracle Cloud

Infrastructure (OCI). The requirements are:

Low latency: The applications are financial and require low latency connectivity into OCI.

Consistency: The application isn't tolerant of performance variation.

Performance: The communications link needs to support up to 1.25 Gbps.

Encryption: The communications link needs to encrypt any data in transit between the on-premises

network and OCI Virtual Cloud Network (VCN).

The client wants to implement the above with as low a cost as possible, while meeting all of the

requirements. What should you suggest? (Choose the best answer.)

A. Provision FastConnect with a single private virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.

B. Provision FastConnect with a single public virtual circuit.

C. Provision a site-to-site IPsec VPN between your on-premises network and your virtual cloud network (VCN) using VPN Connect.

D. Provision FastConnect with a single private virtual circuit.

E. Provision FastConnect with a single public virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.

Your company recently adopted a hybrid cloud architecture which requires them to migrate some of their on-premises web applications to Oracle Cloud Infrastructure (OCI). You created a Terraform template which automatically provisions OCI resources such as compute instances, load balancer, and a database instance. After running the stack using the terraform apply command, it successfully launched the compute instances and the load balancer, but it failed to create a new database instance with the following error:

Service error: NotAuthorizedOrNotFound. shape VM.Standard2.4 not found. http status code: 404

You discovered that the resource quotas assigned to your compartment prevent you from using VM.Standard2.4 instance shapes available in your tenancy. You edit the Terraform script and replace the shape with VM.Standard2.2

Which option would you recommend to re-run the terraform command to have required OCI resources provisioned with the least effort? (Choose the best answer.)

A. terraform plan –target=oci_database_db_system.db_system

B. terraform apply –auto-approve

C. terraform refresh –target=oci_database_db_system.db_system

D. terraform apply –target=oci_database_db_system.db_system

You run a large global application with 90% of customers based in the US and Canada. You want to be able to test a new feature and allow a small percentage of users to access the new version of your application.

What Oracle Cloud Infrastructure Traffic Management steering policy should you utilize? (Choose the best answer.)

A. Load Balancer

B. IP Prefix steering

C. ASN steering

D. Geolocation steering

The boot volume on your Oracle Linux instance has run out of space. Your application has crashed due to a lack of swap space, forcing you to increase the size of the boot volume.

Which step should NOT be included in the process used to solve the issue? (Choose the best answer.)

A. Reattach the boot volume and restart the instance.

B. Attach the resized boot volume to a second instance as a data volume; extend the partition and grow the file system in the resized boot volume.

C. Stop the instance and detach the boot volume.

D. Resize the boot volume by specifying a larger value than the boot volume's current size.

E. Create a RAID 0 configuration to extend the boot volume file system onto another block volume.

You are launching a Windows server in your Oracle Cloud Infrastructure (OCI) tenancy. You provided a startup script during instance initialization, but it was not executed successfully.

What is a possible reason for this error? (Choose the best answer.)

A. Didn't include anything in user_data.

B. Wrote a custom script which tried to install GPU drivers.

C. Ran a cloudbase-init script instead of cloud-init.

D. Specified a #directive on the first line of your script.

You have been asked to update the lifecycle policy for object storage using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI).

Which command can successfully update the policy? (Choose the best answer.)

A. oci os object-lifecycle-policy delete –ns –bn

B. oci os object-lifecycle-policy put –ns –bn

C. oci os object-lifecycle-policy put –ns –bn – –items

D. oci os object-lifecycle-policy get –ns –bn

You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG: NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:

However, after checking the bastion host logs, you discovered that there are IP addresses other than your own that can access your bastion host.

What is the root cause of this issue? (Choose the best answer.)

A. The Security List allows access to all IP address which overrides the Network Security Group ingress rules.

B. All compute instances associated with NSG-050504 are also able to connect to the bastion host.

C. The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.

D. A netmask of /32 allows all IP address in the 140.19.2.0 network, other than your IP 140.19.2.140

You are asked to implement the disaster recovery (DR) and business continuity requirements for Oracle Cloud Infrastructure (OCI) Block Volumes. Two OCI regions being used: a primary/source region and a DR/destination region. The requirements are:

There should be a copy of data in the destination region to use if a region-wide disaster occurs in the source region Minimize costs

Which design will help you meet these requirements? (Choose the best answer.)

A. Clone block volumes. Use Object Storage lifecycle management to automatically move clone objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.

B. Clone block volumes. Copy block volume clones from source region to destination region at regular intervals.

C. Back up block volumes. Copy block volume backups from source region to destination region at regular intervals.

D. Back up block volumes. Use Object Storage lifecycle management to automatically move backup objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.

Recently, your e-commerce web application has been receiving significantly more traffic than usual. Users are reporting they often encounter a 503 Service Error when trying to access your site. Sometimes the site is very slow.

You check your instance pool configuration to confirm that the maximum number of instances is configured to allow 20 compute instances. Currently, 14 compute instances have been provisioned by the instance pool. You also confirm that current CPU utilization across all hosts exceeds the scale-out threshold you set in your auto-scaling policy. However, the instance pool is not provisioning any new instances.

What can you check to determine why the application is NOT functioning properly? (Choose the best answer.)

A. Verify that the new offer feature code did not introduce any performance bugs.

B. Verify that the database is accessible.

C. Verify that the compute resource quota has not been exceeded.

D. Verify that the Quality Assurance team is not currently performing load-testing against production.

You are working as a Cloud Operations Administrator for your company. They have different Oracle Cloud Infrastructure (OCI) tenancies for development and production workloads. Each tenancy has resources in two regions – uk-london-1 and eu-frankfurt-1. You are asked to manage all resources and to automate all the tasks using OCI Command Line Interface (CLI).

Which is the most efficient method to manage multiple environments using OCI CLI? (Choose the best answer.)

A. Use OCI CLI profiles to create multiple sets of credentials in your config file, and reference the appropriate profile at runtime.

B. Create environment variables for the sets of credentials that align to each combination of tenancy, region, and environment.

C. Run oci setup config to create new credentials for each environment every time you want to access the environment.

D. Use different bash terminals for each environment.