1z0-1067-23 Exam Dumps Free Test Engine Verified By Oracle Cloud Certified Experts
Use Real Oracle Achieve the 1z0-1067-23 Dumps - 100% Exam Passing Guarantee
NEW QUESTION # 50
As a solution architect of the Oracle Cloud Infrastructure tenancy, you have been asked to provide members of group CloudOps the ability to view and retrieve monitoring metrics, but only for all monitoring-enabled compute instances. Which policy statement will you define to grant this access?
- A. Restricting monitoring access only to compute instances metrics is not possible.
- B. Allow group CloudOps to read metrics in tenancy where tar-get.metrics.monitoring='oci_computeagent'
- C. Allow group CloudOps to read metrics in tenancy where tar-get.metrics.namespace=oci_computeagent
- D. Allow group CloudOps to read compute-metrics in tenancy
Answer: C
NEW QUESTION # 51
You have been brought In to help secure an existing application that leverages Object Storage buckets to distribute content. The data is currently being shared from public buckets and the security team Is not satisfied with this approach. They have stated that all data must be stored In storage buckets. Your application should be able to provide secure access to the data. The URL that is provided for access to the data must be rotated every 30 days. Which design option will meet these requirements?
- A. Create a private bucket only to share the data.
- B. Create multiple bucket and classify them as Public and Private. Use public bucket for non-sensitive data and private bucket for sensitive data.
- C. Use Pre-Authenticated request, even though there will be multiple URLs this will pro-vide better security.
- D. Create a new group and map users to this group, create a IAM policy providing access to Object Storage service only to this group. Users can then simply login to OCI console and retrieve needed flies.
Answer: C
NEW QUESTION # 52
The general syntax for an IAM policy is: Allow <identity_domain_name>/<subject> to <verb>
<resource-type> in <location> where <conditions> Which two are valid values for <verb>?
- A. manage
- B. read
- C. create
- D. destroy
- E. alter
Answer: A,B
NEW QUESTION # 53
You use a bucket in Object Storage to store backups of a database. Versioning is enabled on these objects, so that every time you take a new backup, it creates a new version. You add the following life-cycle policy rule: {
"action": "DELETE","is-enabled": true, "name": "Delete-Rule", "object-name-filter": null, "target": "objects",
"time-amount": 60, "time-unit": "DAYS" } Which option is true regarding this rule?
- A. Once any specific version is 60 days old, it will be deleted. Deletion will physically delete the data.
- B. If 60 days passes for an object without a new version being created, it will be deleted. Deletion marks the latest version as deleted but does not physically delete it.
- C. 60 days after the initial creation, any object will be deleted. Deletion will physically de-lete all versions of the object.
- D. 60 days after the initial creation, any object will be deleted. Deletion marks the latest version as deleted but does not physically delete it.
Answer: B
NEW QUESTION # 54
You have a Terraform configuration that includes a VCN and three compute instances in the VCN. The configuration also includes a cloud-init script for each compute instance. You upload the configuration to OCI Resource Manager and runan apply job. Which option correctly describes the order of execution, assuming the configuration does not model explicit dependencies?
- A. Resource Manager provisions the VCN, then all compute instances in parallel.
- B. Resource Manager provisions the VCN, then the compute instances one at a time. Terraform does not wait for the cloud-init script of eachinstance to complete before proceeding to the next instance.
- C. Resource Manager provisions the resources from top to bottom in the configuration file.
- D. Resource Manager provisions the VCN, then the compute instances one at a time. Terraform waits for the cloud-init script of each instance to complete before proceeding to the next instance.
Answer: A
NEW QUESTION # 55
In your root compartment, you have two subcompartments, A and B. You have three in-stances in each compartment, including the root (for a total of nine). What does the following metric query return if you use the console to run it in the root compartment? CpuUtiliza-tion[1m].mean()
- A. One number: the average CPU utilization over all nine instances over the last minute
- B. Three different time series: each time series represents the average CPU utilization of one of the three instances in the root compartment per minute.
- C. One time series: the average CPU utilization over all nine instances per minute
- D. One time series: the average CPU utilization over the three instances in the root compartment per minute
Answer: D
NEW QUESTION # 56
Scenario: 3 (Use the OCI CLI to Work with Object Storage from a Compute Instance) Scenario Description: (Hands-On Performance Exam Certification) Your company runs a web application in OCI that generates log files. You want to upload these files to OCI Object Storage to meet data retention requirements. Some files need to be retained indefinitely, whereas others can be deleted after 30 days. Use the OCI CLI to create bucket and upload the log directory and create a lifecycle policy rule to delete temporary files after 30 days.
Pre-Configuration:
To fulfill this requirement, you are provided with the following:
Access to an OCI tenancy, an assigned compartment, and OCI credentials
A compute instance with OCI CLI installed and a set of files in ~/dir_to_upload to use Access to the OCI Console Required IAM policies Assumptions:
Perform the tasks by using the OCI CLI on the compute instance.
Use instance principal authentication for all CLI commands; the instance has been given the policies necessary.
Connect to the compute instance using Cloud Shell's private networking and the provided SSH key.
An SSH key pair has been provided to you for the compute instance.
Private Key https://objectstorage.us-ashburn-1.oraclecloud.com/n/tenancyname/b/PBT_Storage/o/PKey.key Note: Throughout your exam, ensure to use assigned Compartment , User Name and Region.
Complete the following tasks in the provisioned OCI environment:
Task 1: Create a Bucket in Object Storage
Task 2: Upload a Directory's Contents to Object Storage
Task 3: Add a Lifecycle Policy to the Bucket
Answer:
Explanation:
See the solution below with Step by Step Explanation.
Explanation
Task 1: Create a Bucket in Object Storage
Create a bucket named CloudOpsBucket_<user id> with the following properties:
Storage tier: Standard
Auto-tiering: Disabled
Object versioning: Enabled
Emit events: Disabled
Keys: Oracle-managed
Visibility: Private
Task 2: Upload a Directory's Contents to Object Storage
Upload the contents of the directory ~/dir_to_upload and its subdirectories to the bucket CloudOpsBucket Task 3: Add a Lifecycle Policy to the Bucket Create a lifecycle policy rule that deletes all files from ~/dir_to_upload/temp after 30 days Task 1: Create a bucket in Object Storage
1. Open Cloud Shell in the console. Under Network along the top, select Ephemeral Private Network Setup.
2. Select the subnet of the compute instance.
3. SSH into the compute instance using the provided SSH key:
ssh -i /path/to/key opc@<private_ip>
4. In the compute instance, create the bucket with the following command (note that it's one long line):
oci os bucket create -c "<compartment_id>" --name "CloudOpsBucket" --auth instance_principal --versioning
'Enabled'
Task 2: Upload a directory's contents to Object Storage
1. Upload the contents of the specified directory and subdirectories with the following command (note that it's one long line):
oci os object bulk-upload -bn "CloudOpsBucket" --src-dir "~/dir_to_upload" --auth instance_principal Task 3: Add a lifecycle policy to the bucket
1. Create a file named rule.json
2. Add the following content to rule.json:
{"items": [{"action": "DELETE","is-enabled": true,"name": "Delete-Rule","object-name-filter":
{"exclusion-patterns": null,"inclusion-patterns": null,"inclusion-prefixes": ["temp/"]},"target":
"objects","time-amount": 30,"time-unit": "DAYS"}]}
3. Add the lifecycle policy rule with the following command:
oci os object-lifecycle-policy put -bn "CloudOpsBucket" --from-json file://rule.json --auth instance_principal Top of Form
NEW QUESTION # 57
Which statement about Oracle Cloud Infrastructure paravirtualized block volume attachments is TRUE?
(Choose the best answer.)
- A. Paravirtualization utilizes the internal storage stack of compute instance OS and net-work hardware virtualization to access block volumes.
- B. Paravirtualized is required to manage iSCSI configuration for virtual machine instances.
- C. Paravirtualized volumes become immediately available on bare metal compute instances.
- D. Paravirtualized volumes may reduce the maximum IOPS performance for larger block volumes.
Answer: D
NEW QUESTION # 58
You have been monitoring your company applications running in Oracle Cloud Infra-structure (OCI) and notice that the application is using OCI Traffic Management service. This service uses a traffic steering policy to distribute the DNS traffic based on subnet addresses in a rule set. Which steering policy is in use in this particular case? (Choose the best answer.)
- A. IP Prefix steering
- B. Geolocation steering
- C. Load Balancing policy
- D. ASN steering policy
Answer: A
NEW QUESTION # 59
You are an admin of an OCI tenancy. To save cost, you want to restrict the amount of OCPUs that can be provisioned in each compartment. Which will allow this?
- A. Service limits
- B. Budgets
- C. Resource Manager
- D. Compartment quotas
Answer: D
NEW QUESTION # 60
Here is a partial code from a Terraform template written for Oracle Cloud Infrastructure (OCI):
What operation(s) does it perform? (Choose the best answer.)
- A. Provides object read and write access for an OCI Object Storage bucket.
- B. Creates a URL to provide access to an OCI Object Storage bucket for managing objects.
- C. Creates a pre-authenticated request for objects in an OCI Object Storage bucket.
- D. Creates a lifecycle policy for an OCI Object Storage bucket for moving data to Archival storage at a specified time.
Answer: C
NEW QUESTION # 61
Which TWO statements are NOT true regarding Block Storage Volume Resize in Oracle Cloud Infrastructure (OCI)? (Choose two.)
- A. Volumes may only be resized if there is a backup pending.
- B. Volume size can be either increased or decreased.
- C. Volumes may not have attachments added or removed during resize.
- D. Volumes may not be resized if there is a prior resize or an ongoing cloning operation
Answer: A,B
NEW QUESTION # 62
You are running an old version of PostgreSQL on several compute instances and want to update to the latest version. Which tool must you use to update the PostgreSQL packages on the existing machines?
- A. OCI Package Manager
- B. Terraform
- C. Ansible
- D. OCI CLI
Answer: C
NEW QUESTION # 63
An insurance company has contracted you to help automatetheir application business continuity plan. They have the application running in eu-frankfurt-1 as the primary site and uk-london-1 as a disaster recovery site.
Normally they have a DNS A record associated with the IP address of the primary endpoint in eu- frankfurt-1.
In the event of a disaster, they use OCI DNS Zone Management to update the A record and replace it with the IP address of the end-point in uk- londond-1. How can you automate the failover process? (Choose the best answer.)
- A. Create a Health Check that evaluates both regionalendpoints. Create a Traffic Management Steering policy with Failover type and associate it with the Health Check.
- B. Provision a Load Balancer in Frankfurt and associate it with the A record in DNS. Create a backend set with backend servers from both eu-frankfurt-1 and uk- london-1 regions.
- C. Create a Traffic Management Steering policy with Load Balancer type and add both eu-frankfurt-1 and uk-london-1 endpoints. Attach the Traffic Management Steering policy to the A record.
- D. Create a Traffic Management Steering policy and attach it to a backend servers from both eu-frankfurt-1 and uk-london-1 regions.
Answer: A
NEW QUESTION # 64
Your team implemented a SaaS application that requires a whole system deployment for each new customer.
The infrastructure provisioning is already automated via Terraform, and now you have been asked to develop an Ansible playbook to centralize configuration file management and deployment. What is the most effective way to ensure your playbooks are utilizing up-to-date and accurate inventory? (Choose the best answer.)
- A. Export an inventory list using Terraform apply command.
- B. Implement a Command Line Interface script to list all the resources and run it within Ansible to generate a dynamic inventory list.
- C. Export an inventory list from the Oracle Cloud Infrastructure Web console.
- D. Download the dynamic inventory script provided by Oracle Cloud Infrastructure and include it in the playbook invocation command.
Answer: D
NEW QUESTION # 65
......
Check the Free demo of our 1z0-1067-23 Exam Dumps with 89 Questions: https://prepcram.pass4guide.com/1z0-1067-23-dumps-questions.html