1z0-1072-20 Dumps Collection 18Q3 3 de 3

You want an Oracle Cloud Infrastructure (OCI) compute instance in your compartment to make API calls to other services within OCI without storing credentials in a configuration file. What do you need to do?. Create a dynamic group with appropriate matching rules to include the instance, and reference this group in your IAM policy statement. Instances cannot access services outside their compartment. VM instances are treated as users. Create a user, assign the user to that VM instance, and reference the instance in your Identity and Access Management (IAM) policy statement. By default, all VM instances are created with an instance principal. Reference this instance principal in your IAM policy statement.

Given: When creating multiple subnets within a Virtual Cloud Network (VCN), security lists are often made to group common services, for example, SSH and RDP (remote access), 80 and 443 (HTTP), and so on. By default, what is the maximum number of security lists that can be associated with a subnet upon creation?. 4. 2. 5. 3.

Which service would you use if your big data workload required shared access and NFS-based connectivity?. file storage. archive storage. object storage. file storage.

You are the Solutions Architect of a large company and are tasked with migrating all your services to Oracle Cloud Infrastructure. As part of this, you first design a Virtual Cloud Network (VCN) with a public subnet and a private subnet. Then in order to provide Internet connectivity to the instances in your private subnet, you create an Oracle Linux instance in your public subnet and configure NAT on it. However, even after adding all related security list rules and routes in the Route Table, your private subnet instances still cannot connect to the Internet. Which action should you perform to enable Internet connectivity?. Disable “Source and Destination Check” on the VNIC of your Linux instance. There is no way that a private subnet can connect to the Internet. Create a Dynamic Routing Gateway (DRG) and route your private IP traffic to the DRG. Restart the NAT instance.

Which two statements are true about encryption on Oracle Cloud Infrastructure (OCI)? (Choose two.). By default, object storage and block storage are encrypted at rest. A customer is responsible for data encryption in all services of OCI. By default, DB Systems offers an encrypted database. By default, NVMe drives are encrypted but the block volume service is not.

You have an Oracle Cloud Infrastructure (OCI) load balancer distributing traffic via an evenly-weighted round robin policy to your backend web servers. You notice that one of your web servers is receiving more traffic than other web servers. How can you resolve this imbalance?. Check security lists and route tables of your virtual cloud network (VCN) and fix any issues associated with the rules. Create separate listeners for each backend web server. Delete and re-create your OCI load balancer. Disable session persistence on your backend set.

Which two statements are true about an Oracle Cloud Infrastructure Virtual Cloud Network (VCN)? (Choose two.). A VCN can reside in multiple Oracle Cloud Infrastructure regions and Availability Domains. A VCN covers a single contiguous IPv4 CIDR block of your choice. An allowable VCN size range is: /16 to /30. A VCN creates the dynamic routing gateway by default.

You are designing a high bandwidth, redundant connection between your data center and Oracle Cloud Infrastructure (OCI). While researching for OCI FastConnect locations, you notice that you are co-located with Oracle at one of the Oracle FastConnect locations in the Ashburn region. What is the recommended design in this scenario?. Create a cross-connect group and have two or more cross-connects in that group. Create an IPsec VPN connection on this group. Setup two IPsec connections between your data center and OCI Ashburn region. Create a OCI load balancer to distribute the traffic across the two connections. Create a cross-connect group and have at least two or more cross-connects in that group. Create at least two or more virtual circuits in the group. Create a cross-connect group and have at least one cross-connect in that group. Create at least one virtual circuit in the group.

You have created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains a DB System. The application requires a shared file system so you have provisioned one using the file storage service (FSS). You also created the corresponding mount target in one of the application subnets. The VCN security lists are properly configured so that both application servers and the DB System can access the file system. The security team determines that the DB System should have read-only access to the file system. What change would you make to satisfy this requirement?. Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet. Connect via SSH to one of the application servers where the file system has been mounted. Use the Unix command chmod to change permissions on the file system directory, allowing the database user read only access. Modify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateless. Create an instance principal for the DB System. Write an Identity and Access Management (IAM) policy that allows the instance principal read-only access to the file storage service.

Which tool can automatically install Oracle Cloud Infrastructure CLI?. Python. RPM. APT. PIP.

Which two statements are true about Oracle Cloud Infrastructure Compute Service? (Choose two.). You can launch a virtual or bare metal instance by using the same LaunchInstance API. You cannot launch a bare metal server in Oracle Cloud Infrastructure Compute Service. You can attach a block volume in an Availability Domain other than your compute instance. You can share custom images across tenancies and regions.

You are planning to deploy a multi-region web application in Oracle Cloud Infrastructure (OCI). You have customers in North America, Asia and Europe who will access the application. What service is available in OCI to help you choose the regions the lowest latency to these markets?. Internet Intelligence. FastConnect. IPsec VPN. DNS Zone Management.

At the end of a terraform apply operation, what is the default output?. nothing by default. statistics about what was added, changed, and destroyed. the entire state file. statistics about what was added, changed, and destroyed, and the values of outputs.

Which statement is true about Oracle Cloud Identifiers (OCID)?. mytenancy.oc.ocid is a valid OCID. If you delete a user, and them create a new user with the same name, the user will be considered a different user because of different OCIDs. Users can customize OCIDs for all the resources in their compartments. If you delete a user, and then create a new user with the same name, the new user will be assigned the exact same OCIDs as the system remembers.

Which statement is true regarding Autonomous Transaction Processing (ATP)?. A database name cannot be used concurrently for both an Autonomous Data Warehouse (ADW) and an ATP database. After terminating a database, the database name is available for immediate reuse. A maximum of 8 cores can be enabled for an ATP database. A maximum of 2 TB of storage can be enabled for an ATP database.

Which three must be configured for a load balancer to accept incoming traffic? (Choose two.). a listener. a back-end server. a back-end set. a security list that is open on a listener port. a certificate.

As the Cloud Architect for your company, you have been tasked with designing a high performance (HPC) cluster in Oracle Cloud Infrastructure (OCI). The following requirements have been defined: - The cluster must be a minimum of three nodes, but may increase to six nodes when demand requires. - The cluster must be resilient to any potential infrastructure failures. - To minimize latency, all nodes must be deployed within the same availability domain (AD). - Adding or replacing nodes within the cluster should take no more than 30 minutes. Which two steps should be performed to satisfy these requirements in OCI? (Choose two.). Deploy the cluster in a single AD with a shared file system that leverages the file storage service (FSS). Deploy a standby cluster in another AD and configure it to use the same shared file system. Deploy the cluster in a single AD. Place each of the nodes in one of the three different fault domains in that AD. Create a backup of your HPC node compute instance boot volume. Launch new compute instances directly from the backup reduce provisioning time. Create a custom image of your HPC node compute instance. Launch new compute instances using this image to reduce provisioning time. Deploy the cluster in a single AD. Place each of the nodes in a different virtual cloud network (VCN) subnet.

You need to transfer over 12 TB of data from on-premises to your cloud account. You started copying this data over the internet and noticed that it will take too long to complete. Without increasing the costs of your subscription, what is the recommended way to send this amount of data to your cloud account?. Use Data Transfer Service to send your data. Split the data into multiple parts and use the multipart tool. Use a 10 GB FastConnect line to send the data. Send the data over a VPN IPsec tunnel. Compress the data and use the multipart tool.